CVE-2014-3730
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 3.1%
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com."
Productos afectados
n/a · n/aReferencias
http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.htmlhttp://secunia.com/advisories/61281https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/http://ubuntu.com/usn/usn-2212-1http://www.debian.org/security/2014/dsa-2934http://www.openwall.com/lists/oss-security/2014/05/14/10http://www.openwall.com/lists/oss-security/2014/05/15/3http://www.securityfocus.com/bid/67410