CVE-2017-7233
high-risk
Published 2017-04-04
Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.
Do I need to act?
-
0.69% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.1/10
Medium
NETWORK
/ LOW complexity
Affected Products (20)
Affected Vendors
References (22)
Third Party Advisory
http://www.securityfocus.com/bid/97406
Third Party Advisory
http://www.securityfocus.com/bid/97406
and 2 more references
50
/ 100
high-risk
Severity
23/34 · High
Exploitability
2/34 · Minimal
Exposure
25/34 · High