| Package | Affected versions | Patched versions |
|---|---|---|
| django | ≥ 1.3.0, < 1.3.6≥ 1.4.0, < 1.4.4 | 1.3.61.4.4 |
The XML libraries for Python, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free