PT-2011-4856 · Django · Django

Publicado 2011-10-19 · Atualizado 2022-05-14 · CVE-2011-4138

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Django versions 1.2.0 through 1.2.7 Django versions 1.3.x through 1.3.1

Description The issue concerns the verify exists functionality in the URLField implementation. It originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect. This might allow remote attackers to trigger arbitrary GET requests with an unintended source IP address via a crafted Location header.

Recommendations For Django versions 1.2.0 through 1.2.7, update to version 1.2.7 or later. For Django versions 1.3.x through 1.3.1, update to version 1.3.1 or later. As a temporary workaround, consider disabling the verify exists functionality until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-4138

DSA-2332-1

GHSA-WXG3-MFPH-QG9W

PYSEC-2011-3

Produtos afetados

Django

Referências · 18

• https://github.com/django/django · Nota
• https://github.com/django/django/commit/1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0 · Nota
• https://github.com/django/django/commit/7268f8af86186518821d775c530d5558fd726930 · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-3.yaml · Nota
• https://djangoproject.com/weblog/2011/sep/09 · Aviso do Fabricante
• https://djangoproject.com/weblog/2011/sep/10/127 · Correção
• http://openwall.com/lists/oss-security/2011/09/13/2 · Correção
• https://osv.dev/vulnerability/GHSA-wxg3-mfph-qg9w · Aviso do Fabricante
• https://hermes.opensuse.org/messages/14700881 · Aviso do Fabricante
• http://debian.org/security/2011/dsa-2332 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=737366 · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4138 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-4138 · Nota de Segurança
• http://openwall.com/lists/oss-security/2011/09/11/1 · Correção
• https://osv.dev/vulnerability/CVE-2011-4138 · Aviso do Fabricante