admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +72 more potentially affected by CVE-2016-2512 via django (>=1.5.12, <=1.8.5)

django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-2512 Source advisory: OSV:GHSA-PW27-W7W4-9QC7...

django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) +8 more potentially affected by CVE-2016-2512 via django (>=1.9.0rc2, <=1.9.2)

django PYPI version =1.9.0rc2, =0.3.0b2, =0.3.4, =0.1.1, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-2512 Source advisory: OSV:GHSA-PW27-W7W4-9QC7...

django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) +8 more potentially affected by CVE-2016-2512 via django (>=1.9.0rc2, <=1.9.2)

django PYPI version =1.9.0rc2, =0.3.0b2, =0.3.4, =0.1.1, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-2512 Source advisory: GHSA-PW27-W7W4-9QC7...

admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +72 more potentially affected by CVE-2016-2512 via django (>=1.5.12, <=1.8.5)

django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-2512 Source advisory: GHSA-PW27-W7W4-9QC7...

openSUSE Security Update : python3-Django (openSUSE-2018-318)

This update for python3-Django to version 1.18.18 fixes multiple issues. Security issues fixed : - CVE-2018-7537: Fixed catastrophic backtracking in django.utils.text.Truncator. bsc1083305 - CVE-2018-7536: Fixed catastrophic backtracking in urlize and urlizetrunc template filters bsc1083304. -...

Security fix for the ALT Linux 9 package python3-module-django version 1.8.15-alt1

Oct. 24, 2016 Alexey Shabalin 1.8.15-alt1 - 1.8.15 - fixed CVE-2016-2512,CVE-2016-2513,CVE-2016-6186,CVE-2016-7401...

Security fix for the ALT Linux 10 package python3-module-django version 1.8.15-alt1

Oct. 24, 2016 Alexey Shabalin 1.8.15-alt1 - 1.8.15 - fixed CVE-2016-2512,CVE-2016-2513,CVE-2016-6186,CVE-2016-7401...

CVE-2016-2512

The utils.http.issafeurl function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting XSS attacks via a URL containing basic authentication, as demonstrated by...

admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +72 more potentially affected by CVE-2016-2512 via django (>=1.5.12, <=1.8.5)

django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-2512 Source advisory: OSV:PYSEC-2016-15...

django-buckets (>=0.1.1, <=0.1.5), django-isomorphic (>=0.0.1, <=0.0.2) +6 more potentially affected by CVE-2016-2512 via django (>=1.9.0, <=1.9.2)

django PYPI version =1.9.0, =0.1.1, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-2512 Source advisory: OSV:PYSEC-2016-15...

django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) +8 more potentially affected by CVE-2016-2512 via django (>=1.9.0rc2, <=1.9.2)

django PYPI version =1.9.0rc2, =0.3.0b2, =0.3.4, =0.1.1, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-2512 Source advisory: MEND:CVE-2016-2512...

admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +72 more potentially affected by CVE-2016-2512 via django (>=1.5.12, <=1.8.5)

django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-2512 Source advisory: MEND:CVE-2016-2512...

CVE-2016-2512

CVE-2016-2512 affects Django’s utils.http.is_safe_url, allowing remote redirection to attacker-controlled sites and potentially phishing or XSS via a URL containing basic authentication. Affected Django versions: before 1.8.10 and 1.9.x before 1.9.3. The related GHSA entry confirms an exploit pat...

Debian DSA-3544-1 : python-django - security update

Several vulnerabilities were discovered in Django, a high-level Python web development framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-2512 Mark Striemer discovered that some user-supplied redirect URLs containing basic authentication...

[SECURITY] [DSA 3544-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3544-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 07, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3544-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3544-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 07, 2016 https://www.debian.org/security/faq -...

DSA-3544-1 python-django - security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Fedora Update for python-django FEDORA-2016-11183

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...