Skip to content
OpenAdvisories
Medium USN-3851-1 1 CVE

python-django vulnerability

Published Jan 9, 2019 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Django incorrectly handled the default 404 page. A
remote attacker could use this issue to spoof content using a malicious
URL.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS python-django 1.6.11-0ubuntu1.3
Ubuntu · 16.04 LTS 16.04:LTS python-django 1.8.7-1ubuntu5.7
Ubuntu · 18.04 LTS 18.04:LTS python-django 1:1.11.11-1ubuntu1.2

Vulnerabilities 1

  • Medium 6.5
    CVE-2019-3498

    Improper Input Validation in Django

    In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.page_not_found(), leading to content spoofing (in a 404…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2019-3498