CoreCVE
Back

MEDIUM

python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs

Published Apr 4, 2017

Description

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.

Affected products

Remediation

Red Hat statement

This issue affects the versions of python-django as shipped with Red Hat Satellite 6. Please note that python-django, as used by Pulp does not make use of the Pulp doesn't use "is_safe_url" directly or the "i18n" views or the "django.contrib.auth" Login view. Red Hat Product Security has rated this issue as having Low security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Metrics

Weaknesses (2)

CWE-601

Open Redirect

CWE-79

Cross-site Scripting (XSS)

References (20)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 4, 2017
Updated Aug 5, 2024
Reserved Mar 22, 2017
Link CVE-2017-7233
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-7233
Red Hat
Severity Moderate
Public date Apr 4, 2017
Links CVE-2017-7233 - Bugzilla
GHSA-37HP-765X-J95X