Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget

Description

References

• nvd.nist.gov/vuln/detail/CVE-2013-4249 · ADVISORY
• django/django commit 90363e3 · WEB
• django/django commit cbe6d55 · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/86438 · WEB
• django/django · PACKAGE
• pypa/advisory-database · WEB
• web.archive.org/web/20201208180405/http://www.securitytracker.com/id/1028915 · WEB
• djangoproject.com/weblog/2013/aug/13/security-releases-issued · WEB
• seclists.org/oss-sec/2013/q3/369 · WEB
• seclists.org/oss-sec/2013/q3/411 · WEB
• secunia.com/advisories/54476 · Vendor Advisory
• securitytracker.com/id/1028915

django의 다른 취약점

• CVE-2026-15830보통 5.3An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's `django.contrib.gis.geos.GEOSGeometry` is subject to a…
• CVE-2026-15307높음 8.8An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side…
• CVE-2026-53878보통 6.1An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `DomainNameValidator` does not prohibit newlines in domain names (…
• CVE-2026-53877보통 4.8An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-reads its in-memory buff…
• CVE-2026-48588보통 5.3An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `UpdateCacheMiddleware` and the `cache_page()` decorator cache res…