Vulnerabilities
Vulnerable Software
Djangoproject:  >> Django  >> 1.4  Security Vulnerabilities
The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.
CVSS Score
5.0
EPSS Score
0.012
Published
2012-07-31
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.
CVSS Score
4.3
EPSS Score
0.004
Published
2012-07-31


Contact Us

Shodan ® - All rights reserved