VYPR
← All advisories
High severityOSV Advisory· Published Jan 9, 2019· Updated Aug 4, 2024

CVE-2019-3498

CVE-2019-3498

Description

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.page_not_found(), leading to content spoofing (in a 404 error page) if a user fails to recognize that a crafted URL has malicious content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
DjangoPyPI
>= 1.11a1, < 1.11.181.11.18
DjangoPyPI
>= 2.0a1, < 2.0.102.0.10
DjangoPyPI
>= 2.1a1, < 2.1.52.1.5

Affected products

383

Patches

Vulnerability mechanics

References

17

News mentions

0

No linked articles in our index yet.