Lucene search
+L

PYSEC-2017-44

🗓️ 07 Sep 2017 13:29:00Reported by GoogleType 
osv_pysec
 osv_pysec
🔗 osv.dev👁 12 Views

Django versions 1.10.x before 1.10.8 and 1.11.x before 1.11.5 disable escaping on the 500 debug page, enabling cross site scripting when DEBUG is True.

Related
Refs
ReporterTitlePublishedViews
Family
freebsd
FreeBSD
Django -- possible XSS in traceback section of technical 500 debug page
5 Sep 201700:00
–freebsd
attackerkb
attackerkb
CVE-2017-12794
7 Sep 201713:29
–attackerkb
alpinelinux
AlpineLinux
CVE-2017-12794
7 Sep 201713:00
–alpinelinux
bdu_fstec
BDU FSTEC
Django HTML Library XSS
18 Nov 201900:00
–bdu_fstec
circl
Circl
CVE-2017-12794
22 Jun 202113:37
–circl
cnvd
CNVD
Django Cross-Site Scripting Vulnerability (CNVD-2017-31693)
7 Sep 201700:00
–cnvd
cve
CVE
CVE-2017-12794
7 Sep 201713:00
–cve
cvelist
Cvelist
CVE-2017-12794
7 Sep 201713:00
–cvelist
debiancve
Debian CVE
CVE-2017-12794
7 Sep 201713:00
–debiancve
fedora
Fedora
[SECURITY] Fedora 26 Update: python-django-1.10.8-1.fc26
14 Sep 201721:56
–fedora
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

08 Nov 2023 03:58Current
6.7Medium risk
Vulners AI Score6.7
CVSS 24.3
CVSS 36.1
EPSS0.23566
12