Red Hat Security AdvisoryRHSA-2017:1445
python-django security update
Released 2017-06-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 python-django-1.6.11-7.el7ost, python-django-bash-completion-1.6.11-7.el7ost, python-django-doc-1.6.11-7.el7ost
Fixes 1 record
Priority LOW 32
Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02404 · Published 2017-04-04 · Partial fix · 1.10.7, 1.9.13 +1 CWE-601
