Skip to content
OpenAdvisories
Medium DLA-885-1 2 CVEs

python-django - security update

Published Apr 5, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 python-django 1.4.22-1+deb7u3

Vulnerabilities 2

  • Medium 6.1
    CVE-2017-7233

    Django open redirect and possible XSS attack via user-supplied numeric redirect URLs

    Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URL…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 6.1
    CVE-2017-7234

    Django open redirect

    A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI