id: CVE-2018-14574 info: name: Django - Open Redirect author: pikpikcu severity: medium description: Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 contains an open redirect vulnerability. If django.middleware.common.CommonMiddleware and APPEND_SLASH settings are selected, and if the project has a URL pattern that accepts any path ending in a slash, an attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. remediation: | Upgrade to the latest version of Django or apply the relevant patch provided by the Django project. reference: - https://www.djangoproject.com/weblog/2018/aug/01/security-releases/ - https://usn.ubuntu.com/3726-1/ - http://web.archive.org/web/20211206044224/https://securitytracker.com/id/1041403 - https://www.debian.org/security/2018/dsa-4264 - https://access.redhat.com/errata/RHSA-2019:0265 - https://nvd.nist.gov/vuln/detail/CVE-2018-14574 classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N cvss-score: 6.1 cve-id: CVE-2018-14574 cwe-id: CWE-601 epss-score: 0.01218 epss-percentile: 0.83764 cpe: cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:* metadata: max-request: 1 vendor: djangoproject product: django tags: cve,cve2018,django,redirect http: - method: GET path: - "{{BaseURL}}//www.interact.sh" matchers-condition: and matchers: - type: word part: header words: - "Location: https://www.interact.sh" - "Location: http://www.interact.sh" - type: status status: - 301 # digest: 4b0a00483046022100d67f7df845cba38a0da64328202cf1a0f05be1f19717de46ebe590254b31e31d022100cb82e6c899f1e399758ced78ff8ab875bf5ea2b031573aeeae247e2f0c1f164e:922c64590222798bb761d5b6d8e72950