En resumen
- CVE-2011-0698 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a django, django (djangoproject).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.9%, mayor que el 86.7% de las vulnerabilidades.
- Solución: actualizar a 1.1.4, 1.2.5 o posterior.
| Package | Affected versions | Patched versions |
|---|
| django PyPI | ≥ 1.1, < 1.1.4≥ 1.2, < 1.2.5
| 1.1.41.2.5
|
| django | = 1.1= 1.1.0= 1.1.2= 1.1.3= 1.2= 1.2.1= 1.2.2= 1.2.3= 1.2.4
| No fix yet |
Description
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.
NVD description
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free