FreeBSD : Django -- possible XSS in traceback section of technical 500 debug page (aaab03be-932d-11e7-92d8-4b26fc968492)
Medium Nessus Plugin ID 102987
SynopsisThe remote FreeBSD host is missing one or more security-related updates.
DescriptionDjango blog :
In older versions, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn't affect most production sites since you shouldn't run with DEBUG = True (which makes this page accessible) in your production settings.
SolutionUpdate the affected packages.