Lucene search
Redhat.comRH:CVE-2019-12308HistoryApr 09, 2020 - 10:36 a.m.
CVE-2019-12308
2020-04-0910:36:35
redhat.com
access.redhat.com
10
0.01 Low
EPSS
Percentile
84.0%
A validation flaw was found in Django’s AdminURLFieldWidget. The clickable Current URL link generated by AdminURLFieldWidget displayed the provided value without validating it as a safe URL. An unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in a clickable JavaScript link.
Related
openvas
openvas
Fedora Update for python-django FEDORA-2019-57a4324120
2019-06-13 00:00:00
Django AdminURLFieldWidget XSS Vulnerability - Windows
2019-06-26 00:00:00
Django AdminURLFieldWidget XSS Vulnerability - Linux
2019-06-26 00:00:00
osv
osv
PYSEC-2019-79
2019-06-03 17:29:00
Django Cross-site Scripting in AdminURLFieldWidget
2019-06-10 18:43:25
CVE-2019-12308
2019-06-03 17:29:01
cve
cve
CVE-2019-12308
2019-06-03 17:29:01
debian
debian
[SECURITY] [DLA 1814-1] python-django security update
2019-06-05 10:04:24
[SECURITY] [DLA 1842-1] python-django security update
2019-07-01 20:56:20
[SECURITY] [DSA 4476-1] python-django security update
2019-07-05 18:03:12
nessus
nessus
Debian DLA-1814-1 : python-django security update
2019-06-07 00:00:00
Debian DLA-1842-1 : python-django security update
2019-07-02 00:00:00
Fedora 30 : python-django (2019-57a4324120)
2019-06-13 00:00:00
github
github
Django Cross-site Scripting in AdminURLFieldWidget
2019-06-10 18:43:25
veracode
veracode
Cross-site Scripting (XSS)
2019-06-04 02:09:04
nvd
nvd
CVE-2019-12308
2019-06-03 17:29:01
cvelist
cvelist
CVE-2019-12308
2019-06-03 16:24:31
fedora
fedora
[SECURITY] Fedora 30 Update: python-django-2.1.9-1.fc30
2019-06-12 14:48:36
[SECURITY] Fedora 30 Update: python-django-2.1.10-1.fc30
2019-07-13 01:07:30
[SECURITY] Fedora 30 Update: python-django-2.1.11-1.fc30
2019-08-15 18:10:42
alpinelinux
alpinelinux
CVE-2019-12308
2019-06-03 17:29:01
archlinux
archlinux
[ASA-201906-1] python2-django: cross-site scripting
2019-06-04 00:00:00
[ASA-201906-2] python-django: cross-site scripting
2019-06-04 00:00:00
ubuntucve
ubuntucve
CVE-2019-12308
2019-06-03 00:00:00
debiancve
debiancve
CVE-2019-12308
2019-06-03 17:29:01
prion
prion
Code injection
2019-06-03 17:29:00
ubuntu
ubuntu
Django vulnerabilities
2019-07-01 00:00:00
attackerkb
attackerkb
CVE-2019-11358
2019-04-20 00:00:00
freebsd
freebsd
Django -- AdminURLFieldWidget XSS
2019-06-03 00:00:00
suse
suse
Security update for python-Django (moderate)
2019-08-14 00:00:00
Security update for python-Django (moderate)
2019-08-08 00:00:00
altlinux
altlinux
gentoo
gentoo
Django: Multiple vulnerabilities
2020-04-30 00:00:00