oval:org.mitre.oval:def:12419
Definition Id: oval:org.mitre.oval:def:12419 | |||
Oval ID: | oval:org.mitre.oval:def:12419 | ||
Title: | DSA-2163-1 python-django -- multiple | ||
Description: | Several vulnerabilities were discovered in the django web development framework: CVE-2011-0696 For several reasons the internal CSRF protection was not used to validate ajax requests in the past. However, it was discovered that this exception can be exploited with a combination of browser plugins and redirects and thus is not sufficient. CVE-2011-0697 It was discovered that the file upload form is prone to cross-site scripting attacks via the file name. It is important to note that this update introduces minor backward incompatibilities due to the fixes for the above issues. Packages in the oldstable distribution are not affected by these problems. | ||
Family: | unix | Class: | patch |
Reference(s): | DSA-2163-1 CVE-2011-0696 CVE-2011-0697 | Version: | 5 |
Platform(s): | Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0 | Product(s): | python-django |
Definition Synopsis: | |||
Definition Id: oval:org.mitre.oval:def:12959 | |||
Oval ID: | oval:org.mitre.oval:def:12959 | ||
Title: | Debian 6.0 is installed | ||
Description: | Debian 6.0 (squeeze) is installed | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:debian:debian:6.0 | Version: | 6 |
Platform(s): | Debian 6.0 | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:12419 |
Definition Id: oval:org.mitre.oval:def:24698 | |||
Oval ID: | oval:org.mitre.oval:def:24698 | ||
Title: | Debian GNU/kFreeBSD is installed | ||
Description: | Debian GNU/kFreeBSD is installed | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:debian:debian_gnu/kfreebsd | Version: | 3 |
Platform(s): | Debian GNU/kFreeBSD | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:12419 |
Definition Id: oval:org.mitre.oval:def:24894 | |||
Oval ID: | oval:org.mitre.oval:def:24894 | ||
Title: | Debian GNU/Linux is installed | ||
Description: | Debian GNU/Linux is installed | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:debian:debian_gnu/linux | Version: | 3 |
Platform(s): | Debian GNU/Linux | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:12419 |