https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 21:43:47 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-412 certa-2012-avi-412 https://cve.radiocsirt.org/vuln/certa-2012-avi-412 https://cve.radiocsirt.org/vuln/euvd-2026-111810 EUVD-2026-111810 https://cve.radiocsirt.org/vuln/euvd-2026-111810 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3442 <p>The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.</p> <p>The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-3442 https://cve.radiocsirt.org/vuln/ghsa-78vx-ggch-wghm <p><strong>Affected:</strong> PyPI: Django</p> <p>The (1) `django.http.HttpResponseRedirect` and (2) `django.http.HttpResponsePermanentRedirect` classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a `data:` URL.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>The (1) `django.http.HttpResponseRedirect` and (2) `django.http.HttpResponsePermanentRedirect` classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a `data:` URL.</p> https://cve.radiocsirt.org/vuln/ghsa-78vx-ggch-wghm https://cve.radiocsirt.org/vuln/gsd-2012-3442 gsd-2012-3442 https://cve.radiocsirt.org/vuln/gsd-2012-3442 https://cve.radiocsirt.org/vuln/pysec-2012-2 <p><strong>Affected:</strong> PyPI: django</p> <p>The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.</p> https://cve.radiocsirt.org/vuln/pysec-2012-2