oss-sec mailing list archives

Django multiple flaws (CVEs inside)


From: Josh Bressers <bressers () redhat com>
Date: Wed, 9 Feb 2011 10:55:31 -0500 (EST)

Hello,

I received a request to assign Django some IDs for three new issues:
http://www.djangoproject.com/weblog/2011/feb/08/security/

CVE-2011-0696 django Flaw in CSRF handling
CVE-2011-0697 django Potential XSS in file field rendering
CVE-2011-0698 django Directory-traversal vulnerability on Windows

Thanks.

-- 
    JB


Current thread: