Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade python-django | Jul 30, 2024 | Sep 14, 2010 |
| Freebsd | — | Upgrade py24-djangoUpgrade py25-djangoUpgrade py23-django-develUpgrade py30-django-develUpgrade py23-djangoUpgrade py31-django-develUpgrade py30-djangoUpgrade py26-django-develUpgrade py24-django-develUpgrade py31-djangoUpgrade py25-django-develUpgrade py26-django | Dec 10, 2025 | Sep 17, 2010 |
| Ubuntu | — | Upgrade python-django | Nov 8, 2024 | Sep 14, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub