Skip to content
OpenAdvisories
Medium RHSA-2017:3093 1 CVE

Red Hat Security Advisory: python-django security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 11 openstack:11::el7 python-django 0:1.8.18-1.el7ost
Red Hat · OpenStack 11 openstack:11::el7 python-django-bash-completion 0:1.8.18-1.el7ost

Vulnerabilities 1

  • Medium 6.1
    CVE-2017-7233

    Django open redirect and possible XSS attack via user-supplied numeric redirect URLs

    Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URL…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437234
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3093.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-7233
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7233
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7233