django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

This update for python-Django to version 2.08 fixes the following issues :

The following security vulnerability was fixed :

  - CVE-2018-14574: Fixed an redirection vulnerability in     CommonMiddleware (boo#1102680)

The following other bugs were fixed :

  - Fixed a regression in Django 2.0.7 that broke the regex     lookup on MariaDB

  - Fixed a regression where django.template.Template     crashed if the template_string argument is lazy

  - Fixed __regex and __iregex lookups with MySQL

  - Fixed admin check crash when using a query expression in     ModelAdmin.ordering

  - Fixed admin changelist crash when using a query     expression without asc() or desc() in the page&rsquo;s     ordering

  - Fixed a regression that broke custom template filters     that use decorators

  - Fixed detection of custom URL converters in included     pattern

  - Fixed a regression that added an unnecessary subquery to     the GROUP BY clause on MySQL when using a RawSQL     annotation

  - Fixed WKBWriter.write() and write_hex() for empty     polygons on GEOS 3.6.1+

  - Fixed a regression in Django 1.10 that could result in     large memory usage when making edits using     ModelAdmin.list_editable

  - Corrected the import paths that inspectdb generates for     django.contrib.postgres fields

  - Fixed crashes in django.contrib.admindocs when a view is     a callable object, such as     django.contrib.syndication.views.Feed

  - Fixed a regression in Django 1.11.12 where     QuerySet.values() or values_list() after combining an     annotated and unannotated queryset with union(),     difference(), or intersection() crashed due to     mismatching columns

This update for python-Django1 to version 1.11.15 fixes the following issues :

The following security vulnerability was fixed :

  - CVE-2018-14574: Fixed an open redirect possibility in     CommonMiddleware (boo#1102680)

The following other bugs were fixed :

  - Fixed WKBWriter.write() and write_hex() for empty     polygons on GEOS 3.6.1+

  - Fixed a regression where altering a field with a unique     constraint may drop and rebuild more foreign keys than     necessary

  - Fixed crashes in django.contrib.admindocs when a view is     a callable object, such as     django.contrib.syndication.views.Feed

  - Fixed a regression where QuerySet.values() or     values_list() after combining an annotated and     unannotated queryset with union(), difference(), or     intersection() crashed due to mismatching columns

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0265 advisory.

  - django: Catastrophic backtracking in regular expressions via 'urlize' and 'urlizetrunc' (CVE-2018-7536)

  - django: Catastrophic backtracking in regular expressions via 'truncatechars_html' and 'truncatewords_html'     (CVE-2018-7537)

  - django: Open redirect possibility in CommonMiddleware (CVE-2018-14574)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

bugfix update to 2.0.9

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.11.15 security release (CVE-2018-14574)

This fixes an open redirect possibility in CommonMiddleware. Release notes: https://docs.djangoproject.com/en/2.0/releases/1.11.15/

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Andreas Hug discovered an open redirect in Django, a Python web development framework, which is exploitable ifdjango.middleware.common.CommonMiddleware is used and the APPEND_SLASH setting is enabled.

Andreas Hug discovered that Django contained an open redirect in CommonMiddleware. A remote attacker could possibly use this issue to perform phishing attacks.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
123267	openSUSE Security Update : python-Django (openSUSE-2019-614)	Nessus	SuSE Local Security Checks	medium
123266	openSUSE Security Update : python-Django1 (openSUSE-2019-608)	Nessus	SuSE Local Security Checks	medium
121606	RHEL 7 : Red Hat Gluster Storage Web Administration (RHSA-2019:0265)	Nessus	Red Hat Local Security Checks	medium
120517	Fedora 29 : python-django (2018-6fa1017c1d)	Nessus	Fedora Local Security Checks	medium
120229	Fedora 28 : python2-django1.11 (2018-0c85690ba7)	Nessus	Fedora Local Security Checks	medium
112137	openSUSE Security Update : python-Django (openSUSE-2018-914)	Nessus	SuSE Local Security Checks	medium
111810	openSUSE Security Update : python-Django1 (openSUSE-2018-875)	Nessus	SuSE Local Security Checks	medium
111537	Debian DSA-4264-1 : python-django - security update	Nessus	Debian Local Security Checks	medium
111511	Ubuntu 18.04 LTS : Django vulnerability (USN-3726-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2018-14574

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium