RHSA-2025:1070: Moderate: Red Hat OpenStack Platform 16.2 (python-django20) security update
A high-level Python Web framework<br>Security Fix(es):<br><li> python-django20: jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Other sources
Moderate: Red Hat OpenStack Platform 16.2 (python-django20) security update
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:1070?
RHSA-2025:1070 is classified as a moderate security vulnerability.
How do I fix RHSA-2025:1070?
To fix RHSA-2025:1070, you should update to python-django20 version 2.0.13-19.el8 or higher.
What vulnerability does RHSA-2025:1070 address?
RHSA-2025:1070 addresses an untrusted code execution vulnerability via the <option> tag in HTML in jquery used in python-django20.
Which products are affected by RHSA-2025:1070?
RHSA-2025:1070 affects Red Hat OpenStack and Red Hat OpenStack for IBM Power, along with the python-django20 and python3-django20 packages.
Is there a CVSS score for RHSA-2025:1070?
Yes, RHSA-2025:1070 includes a CVSS score that indicates the impact and severity of the vulnerability.