Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-3442
4.3
MEDIUMCVSS v2
Published
July 31, 2012
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.1.4, = 1.2.5, = 0.95, = 1.0, = 1.2.6, = 1.1.2, = 1.0.1, = 1.1, = 1.2, = 1.2-alpha1, = 1.3, = 1.4, = 1.2.7, = 1.0.2, = *, = 1.2.4, = 1.1.3, = 0.96, = 1.2.2, < 1.3.2, >= 1.4, < 1.4.1NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.1.4, = 1.2.5, = 0.95, = 1.0, = 1.2.6, = 1.1.2, = 1.0.1, = 1.1, = 1.2, = 1.2-alpha1, = 1.3, = 1.4, = 1.2.7, = 1.0.2, = *, = 1.2.4, = 1.1.3, = 0.96, = 1.2.2, < 1.3.2, >= 1.4, < 1.4.1NVD