Skip to content
OpenAdvisories
Medium USN-3039-1 1 CVE

python-django vulnerability

Published Jul 19, 2016 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Django incorrectly handled the admin's add/change
related popup. A remote attacker could possibly use this issue to perform a
cross-site scripting attack.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS python-django 1.8.7-1ubuntu5.1

Vulnerabilities 1

  • Medium 6.1
    CVE-2016-6186 Public exploit

    Django Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject ar…

    python-django django python-django Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2016-6186