Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-4520
6.4
MEDIUMCVSS v2
Published
November 18, 2012
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.3.1, = 1.3, = 1.3.2, = 1.3.3, = 1.4, = 1.4.1, >= 1.3, < 1.3.4, >= 1.4, < 1.4.2NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.3.1, = 1.3, = 1.3.2, = 1.3.3, = 1.4, = 1.4.1, >= 1.3, < 1.3.4, >= 1.4, < 1.4.2NVD