CoreCVE
Back

MEDIUM

django: Open redirect possibility in CommonMiddleware

Published Aug 3, 2018

Description

django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

Affected products

Remediation

Red Hat statement

This issue did not affect the versions of python-django as shipped with Red Hat Update Infrastructure 3 as the vulnerable code was introduced in a newer version of the package. Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. Although Red Hat Satellite 6 contains the vulnerable component, it is not affected by this flaw since the condition to exploit the vulnerability cannot be satisfied. In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-django package.

Metrics

Weaknesses (1)

CWE-601

Open Redirect

References (17)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 3, 2018
Updated Aug 5, 2024
Reserved Jul 24, 2018
Link CVE-2018-14574
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-14574
Red Hat
Severity Moderate
Public date Aug 1, 2018
Links CVE-2018-14574 - Bugzilla
GHSA-5HG3-6C2F-F3WR