8881 matches found
Design/Logic Flaw
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service memory consumption by uploading an image file...
PYSEC-2012-2
The 1 django.http.HttpResponseRedirect and 2 django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting XSS attacks via a data: URL...
CVE-2012-3444
The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...
CVE-2012-3444
The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...
CVE-2012-3444
The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...
CVE-2012-3443
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service memory consumption by uploading an image file...
CVE-2012-3443
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service memory consumption by uploading an image file...
CVE-2012-3443
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service memory consumption by uploading an image file...
CVE-2012-3442
Django (CVE-2012-3442) is affected: the redirect targets in django.http.HttpResponseRedirect and HttpResponsePermanentRedirect do not validate the scheme, enabling XSS via a data: URL. Affected versions are Django before 1.3.2 and 1.4.x before 1.4.1. This is a remote issue impacting authenticatio...
CVE-2012-3442
The 1 django.http.HttpResponseRedirect and 2 django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting XSS attacks via a data: URL...
CVE-2012-3442
The 1 django.http.HttpResponseRedirect and 2 django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting XSS attacks via a data: URL...
CVE-2012-3444
CVE-2012-3444 affects Django: get_image_dimensions in image handling for Django versions before 1.3.2 and 1.4.x before 1.4.1 is vulnerable due to a constant chunk size, enabling DoS via large TIFF images. Remediation per connected docs: upgrade Django to a non‑vulnerable version (e.g., 1.3.3 or 1...
CVE-2012-3442
The 1 django.http.HttpResponseRedirect and 2 django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting XSS attacks via a data: URL...
CVE-2012-3443
The vulnerability CVE-2012-3443 affects Django’s ImageField in the form system. Django before 1.3.2 and 1.4.x before 1.4.1 decompress image data during image validation, which can cause denial of service through memory consumption when processing an image upload. Public advisories and vendor note...
PT-2012-4715
Name of the Vulnerable Software and Affected Versions Django versions prior to 1.3.2 Django versions 1.4.x prior to 1.4.1 Description The django.http.HttpResponseRedirect and django.http.HttpResponsePermanentRedirect classes in Django do not validate the scheme of a redirect target, which might...
PT-2012-4716
Name of the Vulnerable Software and Affected Versions Django versions prior to 1.3.2 Django versions 1.4.x prior to 1.4.1 Description The issue allows remote attackers to cause a denial of service due to memory consumption by uploading an image file. This is because the django.forms.ImageField...
CVE-2012-3443: Improper Input Validation
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service memory consumption by uploading an image file...
PT-2012-4717
Name of the Vulnerable Software and Affected Versions Django versions 1.3.x through 1.3.2 Django versions 1.4.x through 1.4.1 Description The issue allows remote attackers to cause a denial of service, specifically process or thread consumption, via a large TIFF image. This is due to the get imag...
CVE-2012-3442: Improper Neutralization of Input During Web Page Generation
The 1 django.http.HttpResponseRedirect and 2 django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting XSS attacks via a data: URL...
CVE-2012-3442
The 1 django.http.HttpResponseRedirect and 2 django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting XSS attacks via a data: URL...