logo

Database

Server side cross-site scripting In django

Description

Cross-site scripting in django Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2011-06972. NVD-2011-06973. OSV-2011-06974. OSV-DEBIAN-2011-06975. GHSA-8m3r-rv5g-fcpq6. GCVE-2011-06977. SECURITY-TRACKER-CVE-2011-0697

References

1. https://github.com/django/django/commit/1966786d2dde73e17f39cf340eb33fcb5d73904e2. https://github.com/django/django/commit/1f814a9547842dcfabdae09573055984af9d3fab3. https://github.com/django/django/commit/90be6ca20d607977dec234ec972b77b83955749b4. https://github.com/django/django/commit/a9cf3d23724ff6918103e86aa863eadd1fab811d5. https://bugzilla.redhat.com/show_bug.cgi?id=6763596. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-11.yaml7. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-31.yaml8. https://web.archive.org/web/20130616104703/http://www.securityfocus.com/bid/462969. http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html10. http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html11. http://openwall.com/lists/oss-security/2011/02/09/612. http://www.debian.org/security/2011/dsa-216313. http://www.djangoproject.com/weblog/2011/feb/08/security14. http://www.mandriva.com/security/advisories?name=MDVSA-2011:03115. http://www.securityfocus.com/bid/4629616. http://www.ubuntu.com/usn/USN-1066-117. http://www.vupen.com/english/advisories/2011/037218. http://www.vupen.com/english/advisories/2011/038819. http://www.vupen.com/english/advisories/2011/042920. http://www.vupen.com/english/advisories/2011/043921. http://www.vupen.com/english/advisories/2011/0441

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.