Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3730HistoryMay 16, 2014 - 3:55 p.m.
CVE-2014-3730
2014-05-1615:55:00
Debian Security Bug Tracker
security-tracker.debian.org
11
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
74.9%
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by “http:\\djangoproject.com.”
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | python-django | < 1.6.5-1 | python-django_1.6.5-1_all.deb |
| Debian | 11 | all | python-django | < 1.6.5-1 | python-django_1.6.5-1_all.deb |
| Debian | 10 | all | python-django | < 1.6.5-1 | python-django_1.6.5-1_all.deb |
| Debian | 999 | all | python-django | < 1.6.5-1 | python-django_1.6.5-1_all.deb |
| Debian | 13 | all | python-django | < 1.6.5-1 | python-django_1.6.5-1_all.deb |
Related
prion
prion
Open redirect
2014-05-16 15:55:00
gitlab
gitlab
Malformed URLs from user input incorrectly validated
2014-05-16 00:00:00
ubuntucve
ubuntucve
CVE-2014-3730
2014-05-16 00:00:00
osv
osv
PYSEC-2014-20
2014-05-16 15:55:00
Django Allows Open Redirects
2022-05-14 02:09:43
python-django - security update
2014-05-19 00:00:00
cve
cve
CVE-2014-3730
2014-05-16 15:55:00
github
github
Django Allows Open Redirects
2022-05-14 02:09:43
nessus
nessus
Fedora 20 : python-django15-1.5.8-1.fc20 (2014-6440)
2014-05-27 00:00:00
Fedora 19 : python-django-1.5.8-1.fc19 (2014-6454)
2014-05-27 00:00:00
Fedora 20 : python-django-1.6.5-1.fc20 (2014-6449)
2014-05-27 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0231)
2022-01-28 00:00:00
Fedora Update for python-django15 FEDORA-2014-6440
2014-06-02 00:00:00
Fedora Update for python-django14 FEDORA-2014-6442
2014-06-02 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-django15-1.5.8-1.fc20
2014-05-26 23:58:15
[SECURITY] Fedora 20 Update: python-django-1.6.5-1.fc20
2014-05-26 23:59:30
[SECURITY] Fedora 20 Update: python-django14-1.4.13-1.fc20
2014-05-26 23:57:14
ibm
ibm
mageia
mageia
Updated python-django package fix two vulnerabilities
2014-05-19 22:53:32
securityvulns
securityvulns
[SECURITY] [DSA 2934-1] python-django security update
2014-06-14 00:00:00
debian
debian
[SECURITY] [DSA 2934-1] python-django security update
2014-05-19 20:39:58
[SECURITY] [DSA 2934-1] python-django security update
2014-05-19 20:39:58
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
74.9%
Related for DEBIANCVE:CVE-2014-3730