Wind River Support Network

HomeDefectsLIN10-7401

Fixed

LIN10-7401 : Security Advisory - python3-django - CVE-2018-14574

Created: Jun 4, 2020 Updated: May 13, 2022

Resolved Date: Jun 11, 2020

Previous ID: LIN1018-6275

Found In Version: 10.17.41.20

Fix Version: 10.17.41.21

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

CREATE(Triage):(User=admin) CVE-2018-14574 (https://nvd.nist.gov/vuln/detail/CVE-2018-14574)

CVEs

CVE-2018-14574