Red Hat Security Advisory

RHSA-2017:3093

python-django security update

Released 2017-10-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 11.0 python-django-1.8.18-1.el7ost, python-django-bash-completion-1.8.18-1.el7ost

TI-2017-04918 CVE-2017-7233 · GHSA-37hp-765x-j95x

LOW 32

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02404 Published 2017-04-04 Partial fix · 1.10.7, 1.9.13 +1 CWE-601