django is vulnerable to open redirect and cross-site scripting (XSS) attacks.The library’s security check for redirects considers certain numeric URLs as safe, allowing a malicious user to cause an open redirect or cross-site scripting attack via URL linking.

CPENameOperatorVersion
djangole1.9.12
djangole1.8.17
djangole1.10.6

Name	Operator	Version
django	le	1.9.12
django	le	1.8.17
django	le	1.10.6

References

www.djangoproject.com/weblog/2017/apr/04/security-releases/

nvd 1

redhat 7

cvelist 1

nessus 12

ubuntucve 1

osv 5

fedora 2

github 1

debiancve 1

openvas 6

seebug 1

prion 1

myhack58 1

alpinelinux 1

cve 1

veracode 1

debian 3

archlinux 2

mageia 1

freebsd 1

ubuntu 1

altlinux 2

nvd

CVE-2017-7233

2017-04-04 17:59:00

redhat

(RHSA-2017:1451) Moderate: python-django security update

2017-06-14 15:02:31

(RHSA-2017:1445) Moderate: python-django security update

2017-06-14 15:00:25

(RHSA-2017:3093) Moderate: python-django security update

2017-10-31 17:11:39

cvelist

CVE-2017-7233

2017-04-04 17:00:00

nessus

Fedora 26 : python-django (2017-f997e46fa7)

2017-07-17 00:00:00

Fedora 25 : python-django (2017-c0ef6054d7)

2017-04-24 00:00:00

RHEL 7 : python-django (RHSA-2017:3093)

2024-04-27 00:00:00

ubuntucve

CVE-2017-7233

2017-04-04 00:00:00

osv

PYSEC-2017-9

2017-04-04 17:59:00

CVE-2017-7233

2017-04-04 17:59:00

Django Open redirect and possible XSS attack via user-supplied numeric redirect URLs

2019-01-04 17:50:26

fedora

[SECURITY] Fedora 25 Update: python-django-1.9.13-1.fc25

2017-04-22 09:23:38

[SECURITY] Fedora 26 Update: python-django-1.10.7-1.fc26

2017-04-21 14:30:34

github

Django Open redirect and possible XSS attack via user-supplied numeric redirect URLs

2019-01-04 17:50:26

debiancve

CVE-2017-7233

2017-04-04 17:59:00

openvas

Fedora Update for python-django FEDORA-2017-c0ef6054d7

2017-04-23 00:00:00

Debian: Security Advisory (DLA-885-1)

2018-01-16 00:00:00

Ubuntu: Security Advisory (USN-3254-1)

2017-04-05 00:00:00

seebug

Django is_safe_url() the URL to jump to the filter function of the Bypass（CVE-2017-7233）

2017-04-13 00:00:00

prion

Open redirect

2017-04-04 17:59:00

myhack58

Django two url jump vulnerability analysis: CVE-2017-7233&7234-vulnerability warning-the black bar safety net

2017-04-14 00:00:00

alpinelinux

CVE-2017-7233

2017-04-04 17:59:00

cve

CVE-2017-7233

2017-04-04 17:59:00

veracode

Open Redirect And Cross-site Scripting (XSS)

2019-01-15 09:17:30

debian

[SECURITY] [DLA 885-1] python-django security update

2017-04-05 09:07:04

[SECURITY] [DSA 3835-1] python-django security update

2017-04-26 20:05:26

[SECURITY] [DSA 3835-1] python-django security update

2017-04-26 20:05:26

archlinux

[ASA-201704-2] python-django: multiple issues

2017-04-06 00:00:00

[ASA-201704-1] python2-django: multiple issues

2017-04-06 00:00:00

mageia

Updated python-django packages fix security vulnerability

2017-04-14 22:40:32

freebsd

django -- multiple vulnerabilities

2017-04-04 00:00:00

ubuntu

Django vulnerabilities

2017-04-04 00:00:00

altlinux

Security fix for the ALT Linux 10 package python3-module-django version 1.8.18-alt1

2017-04-12 00:00:00

Security fix for the ALT Linux 9 package python3-module-django version 1.8.18-alt1

2017-04-12 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

0.004 Low

EPSS

Percentile

72.6%

JSON

Related for VERACODE:3845