CVE-2017-7233

python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs

Published Apr 4, 2017 CVSS 3.0 · 6.1 Medium EPSS 2.4% KEV · Not listed
Description
Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-885-1 python-django security update
Debian DSA Debian DSA DSA-3835-1 python-django security update
EUVD EUVD EUVD-2017-0026 Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an \"on success\" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs \"safe\" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.
Github GHSA Github GHSA GHSA-37hp-765x-j95x Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
Ubuntu USN Ubuntu USN USN-3254-1 Django vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 3:56 PM
Reserved
Mar 22, 2017, 12:00 AM
Status
Modified
Published
Apr 4, 2017, 5:59 PM
Modified
Jun 17, 2026, 1:23 AM
Severity
Moderate
Public date
Apr 4, 2017, 12:00 AM