AVG-838

Package python2-django
Status Fixed
Severity Medium
Type content spoofing
Affected 1.11.17-1
Fixed 1.11.18-1
Current 1.11.20-1 [extra]
Ticket None
Created Sun Jan 6 15:15:26 2019
Issue Severity Remote Type Description
CVE-2019-3498 Medium Yes Content spoofing
A content spoofing issue has been found in django before 2.1.5 and 1.11.18, where an attacker could craft a malicious URL that could make spoofed content...
Date Advisory Package Description
11 Jan 2019 ASA-201901-7 python2-django content spoofing
References
https://www.djangoproject.com/weblog/2019/jan/04/security-releases/