Django vulnerability

2012-11-1500:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.007 Low

EPSS

Percentile

79.6%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10
Ubuntu 10.04

Packages

python-django - High-level Python web development framework

Details

James Kettle discovered Django did not properly filter the Host HTTP header
when processing certain requests. An attacker could exploit this to
generate and display arbitrary URLs to users.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchpython-django< 1.4.1-2ubuntu0.1UNKNOWN
Ubuntu12.10noarchpython-django-doc< 1.4.1-2ubuntu0.1UNKNOWN
Ubuntu12.04noarchpython-django< 1.3.1-4ubuntu1.3UNKNOWN
Ubuntu12.04noarchpython-django-doc< 1.3.1-4ubuntu1.3UNKNOWN
Ubuntu11.10noarchpython-django< 1.3-2ubuntu1.4UNKNOWN
Ubuntu11.10noarchpython-django-doc< 1.3-2ubuntu1.4UNKNOWN
Ubuntu10.04noarchpython-django< 1.1.1-2ubuntu1.6UNKNOWN
Ubuntu10.04noarchpython-django-doc< 1.1.1-2ubuntu1.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.10	noarch	python-django	< 1.4.1-2ubuntu0.1	UNKNOWN
Ubuntu	12.10	noarch	python-django-doc	< 1.4.1-2ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	python-django	< 1.3.1-4ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	python-django-doc	< 1.3.1-4ubuntu1.3	UNKNOWN
Ubuntu	11.10	noarch	python-django	< 1.3-2ubuntu1.4	UNKNOWN
Ubuntu	11.10	noarch	python-django-doc	< 1.3-2ubuntu1.4	UNKNOWN
Ubuntu	10.04	noarch	python-django	< 1.1.1-2ubuntu1.6	UNKNOWN
Ubuntu	10.04	noarch	python-django-doc	< 1.1.1-2ubuntu1.6	UNKNOWN