Summary
Andreas Hug discovered that Django contained an open redirect in
CommonMiddleware. A remote attacker could possibly use this issue to
perform phishing attacks.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | python-django | 1:1.11.11-1ubuntu1.1 |
Vulnerabilities 1
-
Medium 6.1
Django open redirect
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.
References
-
report
https://ubuntu.com/security/CVE-2018-14574