Skip to content
OpenAdvisories
Medium DSA-2740-1 1 CVE

python-django - cross-site scripting vulnerability

Published Aug 23, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 python-django 1.2.3-3+squeeze6
Debian · 7 python-django 1.4.5-1+deb7u1

Vulnerabilities 1

  • Medium 6.1
    CVE-2013-6044

    Django cross-site scripting (XSS) vulnerability via is_safe_url function

    The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting (XSS) or other vulnerabilities into Dja…

    python-django django Debian PyPI