CVE-2010-3082

EUVD-2010-0001
Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
djangoprojectdjango
1.2.1
djangoprojectdjango
1.2.1:2
djangoprojectdjango
1.2.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
python-django
bookworm
3:3.2.19-1+deb12u1
fixed
bookworm (security)
3:3.2.19-1+deb12u1
fixed
bullseye
2:2.2.28-1~deb11u2
fixed
bullseye (security)
2:2.2.28-1~deb11u2
fixed
sid
3:4.2.16-1
fixed
trixie
3:4.2.16-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python-django
dapper
dne
hardy
not-affected
jaunty
not-affected
karmic
not-affected
lucid
not-affected
maverick
Fixed 1.2.3-1ubuntu0.1
released
Common Weakness Enumeration
References
http://marc.info/?l=oss-security&m=128403961700444&w=2
http://www.djangoproject.com/weblog/2010/sep/08/security-release/
http://www.securityfocus.com/bid/43116
http://www.ubuntu.com/usn/USN-1004-1
https://bugzilla.redhat.com/show_bug.cgi?id=632239
https://exchange.xforce.ibmcloud.com/vulnerabilities/61729
http://marc.info/?l=oss-security&m=128403961700444&w=2
http://www.djangoproject.com/weblog/2010/sep/08/security-release/
http://www.securityfocus.com/bid/43116
http://www.ubuntu.com/usn/USN-1004-1
https://bugzilla.redhat.com/show_bug.cgi?id=632239
https://exchange.xforce.ibmcloud.com/vulnerabilities/61729