The Vulnerability History Project
Vulnerabilities
Insights
Curate
Tags
All
Projects
CWEs
Languages
Lessons
Severities
Subsystems
More
News
Projects We Study
How to Contribute
By the Numbers
About Us
Toggle Theme
Warning: Our website does not support Internet Explorer, please use Edge instead.
[1.10.x] Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.
This is a security fix.
by
Lindsey the Elephant Seal 2017-03-14 14:46:53 UTC
commit f824655bc2c50b19d2f202d7640785caabc82787
Django
Fix
Unsafe-URLS's CVE-2017-7233
django/utils/http.py
+2
-65
docs/releases/1.10.7.txt
-12
docs/releases/1.8.18.txt
-12
docs/releases/1.9.13.txt
-12
tests/utils_tests/test_http.py
-3
expand_less