Поиск уязвимостей
Количество 6
Количество 6
CVE-2014-0480
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.
CVE-2014-0480
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.
CVE-2014-0480
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.
CVE-2014-0480
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x ...
GHSA-f7cm-ccfp-3q4r
Django Incorrectly Validates URLs
ALT-PU-2014-3205
ALT-PU-2014-3205: package `python-module-django` update to version 1.6.6-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-0480 The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated. | CVSS2: 5.8 | 2% Низкий | около 12 лет назад |
 | CVE-2014-0480 The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated. | CVSS2: 4.3 | 2% Низкий | около 12 лет назад |
 | CVE-2014-0480 The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated. | CVSS2: 5.8 | 2% Низкий | около 12 лет назад |
| CVE-2014-0480 The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x ... | CVSS2: 5.8 | 2% Низкий | около 12 лет назад |
| GHSA-f7cm-ccfp-3q4r Django Incorrectly Validates URLs | CVSS3: 7.5 | 2% Низкий | больше 4 лет назад |
| ALT-PU-2014-3205 ALT-PU-2014-3205: package `python-module-django` update to version 1.6.6-alt1 | CVSS2: 6 | около 12 лет назад |
Уязвимостей на страницу