AVG-970 log

Package python2-django
Status Fixed
Severity Medium
Type cross-site scripting
Affected 1.11.20-1
Fixed 1.11.21-1
Current Removed
Ticket None
Created Mon Jun 3 17:03:18 2019
Issue Severity Remote Type Description
CVE-2019-12308 Medium Yes Cross-site scripting
The clickable "Current URL" link generated by AdminURLFieldWidget displayed the provided value without validating it as a safe URL. Thus, an unvalidated...
Date Advisory Package Type
04 Jun 2019 ASA-201906-1 python2-django cross-site scripting
References
https://www.djangoproject.com/weblog/2019/jun/03/security-releases/