Lucene search

Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-C1B4E7245276F6BB9AAA25EDCF23F369

HistoryMay 16, 2014 - 12:00 a.m.

Malformed URLs from user input incorrectly validated

2014-05-1600:00:00

https://gitlab.com/gitlab-org/security-products/gemnasium-db

gitlab.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

72.2%

JSON

The validation for redirects does not correctly validate some malformed URLs, which are accepted by some browsers. This allows a user to be redirected to an unsafe URL unexpectedly.

CPENameOperatorVersion
pypi/djangoge1.4
pypi/djangolt1.4.13
pypi/djangoge1.5
pypi/djangolt1.5.8
pypi/djangoge1.6
pypi/djangolt1.6.5
pypi/djangoge1.7b1
pypi/djangolt1.7b4