USN-3726-1: Django vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2018-14574
• https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.1
• https://ubuntu.com/security/notices/USN-3726-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2018-14574

Frequently Asked Questions

• What is the vulnerability ID for this Django vulnerability?

  The vulnerability ID for this Django vulnerability is USN-3726-1.

• What is the description of the Django vulnerability?

  The Django vulnerability is an open redirect in CommonMiddleware that could be exploited by a remote attacker to perform phishing attacks.

• Which software is affected by this Django vulnerability?

  The Django vulnerability affects Ubuntu versions 18.04 with python-django version 1:1.11.11-1ubuntu1.1 and python3-django version 1:1.11.11-1ubuntu1.1.

• How can this Django vulnerability be exploited?

  The Django vulnerability can be exploited by a remote attacker to perform phishing attacks using the open redirect in CommonMiddleware.

• Where can I find more information about this Django vulnerability?

  You can find more information about this Django vulnerability on the Ubuntu Security Notices website: [USN-3726-1](https://ubuntu.com/security/notices/USN-3726-1) and the corresponding CVE-2018-14574.