Kurz gesagt
- CVE-2011-0698 ist eine Schwachstelle (HOCH (CVSS 7.5)) in django, django (djangoproject).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.9%, höher als bei 86.7% aller Schwachstellen.
- Abhilfe: auf 1.1.4, 1.2.5 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| django PyPI | ≥ 1.1, < 1.1.4≥ 1.2, < 1.2.5
| 1.1.41.2.5
|
| django | = 1.1= 1.1.0= 1.1.2= 1.1.3= 1.2= 1.2.1= 1.2.2= 1.2.3= 1.2.4
| No fix yet |
Description
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.
NVD description
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free