Ubuntu 10.10 : python-django vulnerability (USN-1004-1)

It was discovered that Django did not properly sanitize the cookie value when applying CSRF protections resulting in a cross-site scripting XSS vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote...

USN-1004-1: Django vulnerability

It was discovered that Django did not properly sanitize the cookie value when applying CSRF protections resulting in a cross-site scripting XSS vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote...

django -- cross-site scripting vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. VID 3ff95dd3-c291-11df-b0dc-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID 3ff95dd3-c291-11df-b0dc-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

django -- cross-site scripting vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 14 : Django-1.2.3-1.fc14 (2010-14745)

' Today the Django team has released Django 1.2.3, which remedies several issues with the recent 1.2.2 package. This package corrects the following problems : - The patch applied for the security issue covered in Django 1.2.2 caused issues with non-ASCII responses using CSRF tokens. This has been...

[SECURITY] Fedora 14 Update: Django-1.2.3-1.fc14

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

FreeBSD : django -- XSS vulnerability (3ff95dd3-c291-11df-b0dc-00215c6a37bb)

Django project reports : The provided template tag for inserting the CSRF token into forms -- % csrftoken % -- explicitly trusts the cookie value, and displays it as-is. Thus, an attacker who is able to tamper with the value of the CSRF cookie can cause arbitrary content to be inserted, unescaped...

CVE-2010-3082

Cross-site scripting XSS vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken aka csrftoken cookie...

DEBIAN-CVE-2010-3082

Cross-site scripting XSS vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken aka csrftoken cookie...

CVE-2010-3082

Cross-site scripting XSS vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken aka csrftoken cookie...

PYSEC-2010-12

Cross-site scripting XSS vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken aka csrftoken cookie...

Cross site scripting

Cross-site scripting XSS vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken aka csrftoken cookie...

PYSEC-2010-12

Cross-site scripting XSS vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken aka csrftoken cookie...

CVE-2010-3082

Cross-site scripting XSS vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken aka csrftoken cookie...

CVE-2010-3082

Cross-site scripting XSS vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken aka csrftoken cookie...

CVE-2010-3082

CVE-2010-3082 is a cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 where a crafted csrfmiddlewaretoken (csrf_token) cookie enables remote attackers to inject arbitrary script/HTML. The issue affects Django 1.2.x prior to 1.2.2 and is caused by improper handling of the csrf_t...

Fedora Update for Django FEDORA-2010-14398

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2010-14398 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for Django FEDORA-2010-14430

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2010-14430 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for Django FEDORA-2010-14430

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for Django FEDORA-2010-14398

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...