OPENSUSE-SU-2023:0005-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2022-41323: Fixed potential denial-of-service vulnerability in internationalized URLs boo1203793 - CVE-2022-36359: Fixed a potential reflected file download vulnerability in FileResponse boo1201923 - Update from 2.2.12 to 2.2.28...

Security update for python-Django (important)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2023:0005-1 Rating: important References: 1185713 1186608 1186611 1193240 1194115 1194116 1194117 1195086 1195088 1198297 1198398 1198399 1201923 1203793 Cross-References: CVE-2021-32052 CVE-2021-33203...

PT-2023-3407

Name of the Vulnerable Software and Affected Versions Django versions 3.2 through 3.2.18 Django versions 4.0 through 4.1.8 Django versions 4.2 through 4.2.0 Description The issue is related to insufficient input validation in the forms.FileField and forms.ImageField components of the Django web...

A PyPI for Yola 跨站脚本漏洞

A PyPI for Yola is a simple django application in the Yola open source. A PyPI for Yola suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the parameter text leading to cross-site scripting...

Open Redirect

djangotermsandconditions is vulnerable to open redirect. The vulnerability exists in views.py due to lack of url validations, which allows an attacker to redirect the victim to a malicious site...

CVE-2022-4595

A vulnerability classified as problematic has been found in django-openipam. This affects an unknown part of the file openipam/report/templates/report/exposedhosts.html. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The...

Cross site scripting

A vulnerability classified as problematic has been found in django-openipam. This affects an unknown part of the file openipam/report/templates/report/exposedhosts.html. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The...

PT-2022-27697 · Unknown · Django-Openipam

Name of the Vulnerable Software and Affected Versions: django-openipam affected versions not specified Description: A problematic vulnerability has been found in django-openipam, affecting an unknown part of the file openipam/report/templates/report/exposed hosts.html. The manipulation of the...

CVE-2022-4595 django-openipam exposed_hosts.html cross site scripting

A vulnerability classified as problematic has been found in django-openipam. This affects an unknown part of the file openipam/report/templates/report/exposedhosts.html. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2022-4595 django-openipam exposed_hosts.html cross site scripting

A vulnerability classified as problematic has been found in django-openipam. This affects an unknown part of the file openipam/report/templates/report/exposedhosts.html. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2022-4595

The CVE-2022-4595 issue affects django-openipam, specifically an XSS vulnerability in the template openipam/report/templates/report/exposed_hosts.html. The root cause is described as manipulation of the description argument, enabling cross-site scripting. Impact is remote initiation of an attack ...

django-openipam 安全漏洞

django-openipam is openipam open source a openipam foo Django refactoring . A security vulnerability exists in django-openipam. An attacker exploited the vulnerability to perform cross-site scripting attacks...

CVE-2022-4595 django-openipam exposed_hosts.html cross site scripting

A vulnerability classified as problematic has been found in django-openipam. This affects an unknown part of the file openipam/report/templates/report/exposedhosts.html. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The...

Django Terms and Conditions 输入验证错误漏洞

Django Terms and Conditions is a Django module from the individual developer Tim L. White. It provides you with a configurable way to send users to a T&C acceptance page before they visit a website. An input validation error vulnerability exists in Django Terms and Conditions version 2.0.10 and...

Cross-site Scripting (XSS)

django-photologue is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the object.caption argument in the photodetail.html, allowing an attacker to inject and execute malicious JavaScript through the default template...

django-photologue vulnerable to Cross-site Scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

GHSA-287Q-JFCP-9VHV django-photologue vulnerable to Cross-site Scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

CVE-2022-4526

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

PYSEC-2022-43061

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

Cross site scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...