logo

Database

Server side cross-site scripting In python-django

Description

cross-site scripting

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 11

10

Aliases

1. CVE-2019-123082. NVD-2019-123083. OSV-2019-123084. OSV-ALPINE-2019-123085. OSV-DEBIAN-2019-123086. GHSA-7rp2-fm2h-wchj7. GCVE-2019-123088. security.gentoo.org9. lists.debian.org10. lists.debian.org11. SECURITY-CVE-2019-1230812. SECURITY-TRACKER-CVE-2019-12308

References

1. https://github.com/django/django/commit/09186a13d975de6d049f8b3e05484f66b01ece622. https://github.com/django/django/commit/afddabf8428ddc89a332f7a78d0d21eaf2b5a6733. https://github.com/django/django/commit/c238701859a52d584f349cce15d56c8e8137c52b4. https://www.djangoproject.com/weblog/2019/jun/03/security-releases5. https://www.debian.org/security/2019/dsa-44766. https://usn.ubuntu.com/4043-17. https://seclists.org/bugtraq/2019/Jul/108. https://lists.fedoraproject.org/archives/list/[email protected]/message/USYRARSYB7PE3S2ZQO7PZNWMH7RPGL5G9. https://groups.google.com/forum/#!topic/django-announce/GEbHU7YoVz810. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-79.yaml11. https://docs.djangoproject.com/en/dev/releases/security12. https://docs.djangoproject.com/en/dev/releases/2.2.213. https://docs.djangoproject.com/en/dev/releases/2.1.914. https://docs.djangoproject.com/en/dev/releases/1.11.2115. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html16. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html17. http://www.openwall.com/lists/oss-security/2019/06/03/2

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.