Django vulnerability

2012-11-1500:00:00

ubuntu.com

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0.007

Percentile

79.9%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10
Ubuntu 10.04

Packages

python-django - High-level Python web development framework

Details

James Kettle discovered Django did not properly filter the Host HTTP header
when processing certain requests. An attacker could exploit this to
generate and display arbitrary URLs to users.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchpython-django< 1.4.1-2ubuntu0.1UNKNOWN
Ubuntu12.10noarchpython-django-doc< 1.4.1-2ubuntu0.1UNKNOWN
Ubuntu12.04noarchpython-django< 1.3.1-4ubuntu1.3UNKNOWN
Ubuntu12.04noarchpython-django-doc< 1.3.1-4ubuntu1.3UNKNOWN
Ubuntu11.10noarchpython-django< 1.3-2ubuntu1.4UNKNOWN
Ubuntu11.10noarchpython-django-doc< 1.3-2ubuntu1.4UNKNOWN
Ubuntu10.04noarchpython-django< 1.1.1-2ubuntu1.6UNKNOWN
Ubuntu10.04noarchpython-django-doc< 1.1.1-2ubuntu1.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.10	noarch	python-django	< 1.4.1-2ubuntu0.1	UNKNOWN
Ubuntu	12.10	noarch	python-django-doc	< 1.4.1-2ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	python-django	< 1.3.1-4ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	python-django-doc	< 1.3.1-4ubuntu1.3	UNKNOWN
Ubuntu	11.10	noarch	python-django	< 1.3-2ubuntu1.4	UNKNOWN
Ubuntu	11.10	noarch	python-django-doc	< 1.3-2ubuntu1.4	UNKNOWN
Ubuntu	10.04	noarch	python-django	< 1.1.1-2ubuntu1.6	UNKNOWN
Ubuntu	10.04	noarch	python-django-doc	< 1.1.1-2ubuntu1.6	UNKNOWN