Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-0480
5.8
MEDIUMCVSS v2
Severity scale
010
Description
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.7, = 1.6, = 1.6.5, = 1.6.3, = 1.6.4, = 1.6.1, = 1.6.2, = 1.5, = 1.5.7, = 1.5.1, = 1.5.3, = 1.5.4, = 1.5.5, = 1.5.8, = 1.5.2, = 1.5.6, = 1.4.12, = 1.4.9, = 1.4.10, = 1.4.6, = 1.4.4, = 1.4.5, = 1.4.2, = 1.4.11, = 1.4.7, <= 1.4.13, = 1.4, = 1.4.1, = 1.4.8, < 1.4.14, >= 1.5, < 1.5.9, >= 1.6, < 1.6.6NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.7, = 1.6, = 1.6.5, = 1.6.3, = 1.6.4, = 1.6.1, = 1.6.2, = 1.5, = 1.5.7, = 1.5.1, = 1.5.3, = 1.5.4, = 1.5.5, = 1.5.8, = 1.5.2, = 1.5.6, = 1.4.12, = 1.4.9, = 1.4.10, = 1.4.6, = 1.4.4, = 1.4.5, = 1.4.2, = 1.4.11, = 1.4.7, <= 1.4.13, = 1.4, = 1.4.1, = 1.4.8, < 1.4.14, >= 1.5, < 1.5.9, >= 1.6, < 1.6.6NVD