Oval Definition:
oval:org.cisecurity:def:66
Revision Date
:
2016-02-08
Version
:
2
Title
:
DSA-3204-1 -- python-django -- security update
Description
:
Daniel Chatfield discovered that python-django, a high-level Python web development framework, incorrectly handled user-supplied redirect URLs. A remote attacker could use this flaw to perform a cross-site scripting attack.
Family
:
unix
Class
:
patch
Status
:
ACCEPTED
Reference(s)
:
CVE-2015-2317
DSA-3204-1
Platform(s)
:
Debian GNU/kFreeBSD 7.0
Debian GNU/Linux 7.0
Product(s)
:
python-django
Definition Synopsis
Debian 7 is installed
AND
GNU/Linux or GNU/kFreeBSD kernel
Debian GNU/Linux is installed
OR
Debian GNU/kFreeBSD is installed
AND
python-django is earlier than 0:1.4.5-1+deb7u11
BACK