medium6.1
CVE-2018-14574
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.
Impact
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Djangoproject | Django | from 1.11 before 1.11.15 from 2.0 before 2.0.8 |
| Debian | Debian Linux | Version 9.0 |
| Canonical | Ubuntu Linux | Version 18.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104970
- http://www.securitytracker.com/id/1041403
- https://access.redhat.com/errata/RHSA-2019:0265
- https://usn.ubuntu.com/3726-1/
- https://www.debian.org/security/2018/dsa-4264
- https://www.djangoproject.com/weblog/2018/aug/01/security-releases/
- http://www.securityfocus.com/bid/104970
- http://www.securitytracker.com/id/1041403
- https://access.redhat.com/errata/RHSA-2019:0265
- https://usn.ubuntu.com/3726-1/
- https://www.debian.org/security/2018/dsa-4264
- https://www.djangoproject.com/weblog/2018/aug/01/security-releases/