USN-3726-1: Django vulnerability
Andreas Hug discovered that Django contained an open redirect in CommonMiddleware. A remote attacker could possibly use this issue to perform phishing attacks.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Django vulnerability?
The vulnerability ID for this Django vulnerability is USN-3726-1.
What is the description of the Django vulnerability?
The Django vulnerability is an open redirect in CommonMiddleware that could be exploited by a remote attacker to perform phishing attacks.
Which software is affected by this Django vulnerability?
The Django vulnerability affects Ubuntu versions 18.04 with python-django version 1:1.11.11-1ubuntu1.1 and python3-django version 1:1.11.11-1ubuntu1.1.
How can this Django vulnerability be exploited?
The Django vulnerability can be exploited by a remote attacker to perform phishing attacks using the open redirect in CommonMiddleware.
Where can I find more information about this Django vulnerability?
You can find more information about this Django vulnerability on the Ubuntu Security Notices website: [USN-3726-1](https://ubuntu.com/security/notices/USN-3726-1) and the corresponding CVE-2018-14574.