CVE-2014-3730 (debian_linux, django, opensuse, ubuntu_linux)

CVE-2014-3730 (debian_linux, django, opensuse, ubuntu_linux)

The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\djangoproject.com."

Source: CVE-2014-3730 (debian_linux, django, opensuse, ubuntu_linux)

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다