Open Redirect And Cross-site Scripting (XSS)

2019-01-1509:17:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

72.6%

JSON

django is vulnerable to open redirect and cross-site scripting (XSS) attacks.The library’s security check for redirects considers certain numeric URLs as safe, allowing a malicious user to cause an open redirect or cross-site scripting attack via URL linking.

CPENameOperatorVersion
python-djangoeq1.6.10__1.el7ui
python-djangoeq1.6.11__6.el7ost
python-djangoeq1.8.14__1.el7
python-djangoeq1.6.11__4.el7ost
python-djangoeq1.8.3__1.el7
python-djangoeq1.8.4__1.el7
python-djangoeq1.6.11__7.el7rhgs
python-djangoeq1.6.11__7.el7ost
python-djangoeq1.6.11__3.el7ost
python-djangoeq1.6.11__5.el7ost

Name	Operator	Version
python-django	eq	1.6.10__1.el7ui
python-django	eq	1.6.11__6.el7ost
python-django	eq	1.8.14__1.el7
python-django	eq	1.6.11__4.el7ost
python-django	eq	1.8.3__1.el7
python-django	eq	1.8.4__1.el7
python-django	eq	1.6.11__7.el7rhgs
python-django	eq	1.6.11__7.el7ost
python-django	eq	1.6.11__3.el7ost
python-django	eq	1.6.11__5.el7ost