Wind River Support Network

HomeDefectsLIN9-10004

Fixed

LIN9-10004 : Security Advisory - python3-django - CVE-2018-14574

Created: Jun 4, 2020 Updated: Aug 20, 2020

Resolved Date: Jul 30, 2020

Previous ID: LIN10-7402

Found In Version: 9.0.0.24

Fix Version: 9.0.0.26

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

CREATE(Triage):(User=admin) [CVE-2018-14574|https://nvd.nist.gov/vuln/detail/CVE-2018-14574]

CVEs

CVE-2018-14574