NVD

Id
31861  
Name
CVE-2014-3730  
Description
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\djangoproject.com."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-05-16  
Modified Date
2017-01-06  
Seq
2014-3730  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168038 31861 CVE-2014-3730 openSUSE-SU-2014:1132  View
168039 31861 CVE-2014-3730 61281  View
168040 31861 CVE-2014-3730 USN-2212-1  View
168041 31861 CVE-2014-3730 DSA-2934  View
168042 31861 CVE-2014-3730 [oss-security] 20140514 CVE Reuest: Django: Malformed URLs from user input incorrectly validated  View
168043 31861 CVE-2014-3730 [oss-security] 20140514 Re: CVE Reuest: Django: Malformed URLs from user input incorrectly validated  View
168044 31861 CVE-2014-3730 67410  View
168045 31861 CVE-2014-3730 https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13661 JVNDB-2014-002536 Django の django.util.http.is_safe_url 関数におけるオープンリダイレクト攻撃を実行される脆弱性 Django の django.util.http.is_safe_url 関数は、URL を適切に検証しないため、オープンリダイレクト攻撃を実行される脆弱性が存在します。 CVE-2014-3730 71018 CVE-2014-3730 31861 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002536.html 2014-05-14 2014-05-20 View