USN-3851-1: Django vulnerability
It was discovered that Django incorrectly handled the default 404 page. A remote attacker could use this issue to spoof content using a malicious URL.
Affected Software
Event History
Frequently Asked Questions
What is USN-3851-1?
USN-3851-1 is the vulnerability identifier for the Django vulnerability.
How does Django vulnerability affect my system?
The Django vulnerability allows remote attackers to spoof content using a malicious URL.
Which versions of Django are affected by the vulnerability?
The vulnerability affects Django versions 1.11.15-1ubuntu1.1, 1.11.11-1ubuntu1.2, 1.8.7-1ubuntu5.7, and 1.6.11-0ubuntu1.3.
How do I fix the Django vulnerability?
To fix the Django vulnerability, update the python-django or python3-django package to versions 1:1.11.15-1ubuntu1.1 or higher.
Where can I find more information about the Django vulnerability?
You can find more information about the Django vulnerability at the following references: [https://ubuntu.com/security/CVE-2019-3498](https://ubuntu.com/security/CVE-2019-3498), [https://launchpad.net/ubuntu/+source/python-django/1:1.11.15-1ubuntu1.1](https://launchpad.net/ubuntu/+source/python-django/1:1.11.15-1ubuntu1.1), [https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.2](https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.2)