Skip to content
OpenAdvisories
Medium DLA-1814-1 1 CVE

python-django - security update

Published Jun 5, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 python-django 1.7.11-1+deb8u5

Vulnerabilities 1

  • Medium 6.1
    CVE-2019-12308

    Django Cross-site Scripting in AdminURLFieldWidget

    An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value sto…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI