Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-4139
5
MEDIUMCVSS v2
Published
October 19, 2011
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.<= 1.2.6, = 1.2.5, = 0.95, = 1.0, = 1.3, = 1.1.2, = 1.0.1, = 1.1, = 1.2.1, = 1.2, = 0.91, = 1.2.2, = 0.96, = 0.95.1, = 1.2.3, = 1.1.0, = 1.1.3, = 1.2.4, = 1.0.2, < 1.2.7, >= 1.3, < 1.3.1NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.<= 1.2.6, = 1.2.5, = 0.95, = 1.0, = 1.3, = 1.1.2, = 1.0.1, = 1.1, = 1.2.1, = 1.2, = 0.91, = 1.2.2, = 0.96, = 0.95.1, = 1.2.3, = 1.1.0, = 1.1.3, = 1.2.4, = 1.0.2, < 1.2.7, >= 1.3, < 1.3.1NVD