Description

The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL, related to redirect URLs, as demonstrated by a "\njavascript:" URL.

Remediation

References

CVE-2015-0220

Related Vulnerabilities

Oracle JRE CVE-2013-0426 Vulnerability (CVE-2013-0426)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12647)

MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-45867)

Oracle Database Server CVE-2017-10282 Vulnerability (CVE-2017-10282)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-8994)

Severity

Medium

Classification

CVE-2015-0220 CWE-707

Tags

Missing Update Known Vulnerabilities