PT-2011-4856 · Django · Django

Published 2011-10-19 · Updated 2022-05-14 · CVE-2011-4138

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Django versions 1.2.0 through 1.2.7 Django versions 1.3.x through 1.3.1

Description The issue concerns the verify exists functionality in the URLField implementation. It originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect. This might allow remote attackers to trigger arbitrary GET requests with an unintended source IP address via a crafted Location header.

Recommendations For Django versions 1.2.0 through 1.2.7, update to version 1.2.7 or later. For Django versions 1.3.x through 1.3.1, update to version 1.3.1 or later. As a temporary workaround, consider disabling the verify exists functionality until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-4138

DSA-2332-1

GHSA-WXG3-MFPH-QG9W

PYSEC-2011-3

Affected Products

Django

References · 18

• https://djangoproject.com/weblog/2011/sep/09 · Vendor Advisory
• https://djangoproject.com/weblog/2011/sep/10/127 · Patch
• http://openwall.com/lists/oss-security/2011/09/13/2 · Patch
• https://osv.dev/vulnerability/GHSA-wxg3-mfph-qg9w · Vendor Advisory
• https://hermes.opensuse.org/messages/14700881 · Vendor Advisory
• http://debian.org/security/2011/dsa-2332 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=737366 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4138 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-4138 · Security Note
• http://openwall.com/lists/oss-security/2011/09/11/1 · Patch
• https://osv.dev/vulnerability/CVE-2011-4138 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2011-3 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-4138 · Vendor Advisory
• https://github.com/django/django · Note
• https://github.com/django/django/commit/1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0 · Note