Description

Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.

Remediation

References

CVE-2011-0697

Related Vulnerabilities

Python Off-by-one Error Vulnerability (CVE-2007-2052)

Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-6661)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.3.1)

Jboss EAP Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-10212)

Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-20920)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-0697