Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-0697
4.3
MEDIUMCVSS v2
Published
February 14, 2011
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.1.2, = 1.1, = 1.1.3, = 1.1.0, = 1.2.1, = 1.2.4, = 1.2.3, = 1.2, = 1.2.2, >= 1.1, < 1.1.4, >= 1.2, < 1.2.5NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.1.2, = 1.1, = 1.1.3, = 1.1.0, = 1.2.1, = 1.2.4, = 1.2.3, = 1.2, = 1.2.2, >= 1.1, < 1.1.4, >= 1.2, < 1.2.5NVD