Lucene search
GoogleOSV:PYSEC-2014-20HistoryMay 16, 2014 - 3:55 p.m.
PYSEC-2014-20
2014-05-1615:55:00
Google
osv.dev
23
EPSS
0.005
Percentile
75.2%
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by “http:\\djangoproject.com.”
References
lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
secunia.com/advisories/61281
ubuntu.com/usn/usn-2212-1
www.debian.org/security/2014/dsa-2934
www.openwall.com/lists/oss-security/2014/05/14/10
www.openwall.com/lists/oss-security/2014/05/15/3
www.securityfocus.com/bid/67410
www.djangoproject.com/weblog/2014/may/14/security-releases-issued/
Related
prion
prion
Open redirect
2014-05-16 15:55:00
osv
osv
Django Allows Open Redirects
2022-05-14 02:09:43
python-django - security update
2014-05-19 00:00:00
gitlab
gitlab
Malformed URLs from user input incorrectly validated
2014-05-16 00:00:00
nvd
nvd
CVE-2014-3730
2014-05-16 15:55:05
debiancve
debiancve
CVE-2014-3730
2014-05-16 15:55:05
cvelist
cvelist
CVE-2014-3730
2014-05-16 15:00:00
github
github
Django Allows Open Redirects
2022-05-14 02:09:43
cve
cve
CVE-2014-3730
2014-05-16 15:55:05
ubuntucve
ubuntucve
CVE-2014-3730
2014-05-16 00:00:00
nessus
nessus
Fedora 20 : python-django15-1.5.8-1.fc20 (2014-6440)
2014-05-27 00:00:00
Fedora 20 : python-django14-1.4.13-1.fc20 (2014-6442)
2014-05-27 00:00:00
Fedora 20 : python-django-1.6.5-1.fc20 (2014-6449)
2014-05-27 00:00:00
openvas
openvas
Fedora Update for python-django15 FEDORA-2014-6440
2014-06-02 00:00:00
Mageia: Security Advisory (MGASA-2014-0231)
2022-01-28 00:00:00
Fedora Update for python-django14 FEDORA-2014-6442
2014-06-02 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 20 Update: python-django15-1.5.8-1.fc20
2014-05-26 23:58:15
[SECURITY] Fedora 20 Update: python-django-1.6.5-1.fc20
2014-05-26 23:59:30
[SECURITY] Fedora 20 Update: python-django14-1.4.13-1.fc20
2014-05-26 23:57:14
mageia
mageia
Updated python-django package fix two vulnerabilities
2014-05-19 22:53:32
debian
debian
[SECURITY] [DSA 2934-1] python-django security update
2014-05-19 20:39:58
[SECURITY] [DSA 2934-1] python-django security update
2014-05-19 20:39:58
securityvulns
securityvulns
[SECURITY] [DSA 2934-1] python-django security update
2014-06-14 00:00:00