Uncontrolled external site redirect In py-django
Description
multiple issues
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.10 | =1.10.5-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.10.7-r0 | 1.10.7-r0 | |
alpine v3.7 | =1.10.5-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.10.7-r0 | 1.10.7-r0 | |
alpine v3.8 | =1.10.5-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.10.7-r0 | 1.10.7-r0 | |
alpine v3.9 | =1.10.5-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.10.7-r0 | 1.10.7-r0 | |
alpine v3.11 | =1.10.5-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.10.7-r0 | 1.10.7-r0 | |
alpine v3.2 | =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.3-r1 || >=0 <1.8.18-r0 | 1.8.18-r0 | |
alpine v3.3 | =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || >=0 <1.8.18-r0 | 1.8.18-r0 | |
alpine v3.4 | =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.8.18-r0 | 1.8.18-r0 | |
alpine v3.5 | =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.8.18-r0 | 1.8.18-r0 | |
alpine v3.6 | =1.10.5-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.10.7-r0 | 1.10.7-r0 |
1-10 of 17
10
Aliases
References
1. https://github.com/django/django/commit/2a9f6ef71b8e23fd267ee2be1be26dde8ab670372. https://github.com/django/django/commit/4a6b945dffe8d10e7cec107d93e6efaebfbded293. https://github.com/django/django/commit/5f1ffb07afc1e59729ce2b283124116d6c0659e44. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2017-10.yaml5. https://web.archive.org/web/20170429023907/http://www.securitytracker.com/id/10381776. https://web.archive.org/web/20170526042328/http://www.securityfocus.com/bid/974017. https://www.djangoproject.com/weblog/2017/apr/04/security-releases8. http://www.debian.org/security/2017/dsa-3835
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.