En bref
- CVE-2011-0698 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant django, django (djangoproject).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.9%, plus élevée que 86.7% des vulnérabilités.
- Correctif : mettre à jour vers 1.1.4, 1.2.5 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| django PyPI | ≥ 1.1, < 1.1.4≥ 1.2, < 1.2.5
| 1.1.41.2.5
|
| django | = 1.1= 1.1.0= 1.1.2= 1.1.3= 1.2= 1.2.1= 1.2.2= 1.2.3= 1.2.4
| No fix yet |
Description
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.
NVD description
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free