CVE-2013-4249: XSS
Published Oct 4, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField.
Affected Software
6 affected componentsFixes available
pip/django>=1.5<1.5.2
1.5.2
djangoproject Django=1.5
djangoproject Django=1.5-alpha
djangoproject Django=1.5-beta
djangoproject Django=1.5.1
djangoproject Django=1.6-beta1
Remediation
Event History
Oct 4, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
01:33 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-4249?
The severity of CVE-2013-4249 is classified as Medium due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2013-4249?
To fix CVE-2013-4249, upgrade Django to version 1.5.2 or later.
3
Which versions of Django are affected by CVE-2013-4249?
Django versions 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 are affected by CVE-2013-4249.
4
What type of vulnerability is CVE-2013-4249?
CVE-2013-4249 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2013-4249 lead to remote attacks?
Yes, CVE-2013-4249 can allow remote attackers to inject arbitrary web scripts or HTML.