.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

Vulnerability advisory

GHSA-5hg3-6c2f-f3wr

Django open redirect

Published Oct 4, 2018Updated Sep 17, 2024OSV record ↗

Also known as CVE-2018-14574PYSEC-2018-2

Severity

CVSS 3.xCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Affected versions

django PyPI

All django advisories →

Affected	Fixed in
`2.0` to before 2.0.8	`2.0.8`Advisories →
Also listed as affected (8) `2.0` `2.0.1` `2.0.2` `2.0.3` `2.0.4` `2.0.5` `2.0.6` `2.0.7`
`1.11` to before 1.11.15	`1.11.15`Advisories →
Also listed as affected (15) `1.11` `1.11.1` `1.11.10` `1.11.11` `1.11.12` `1.11.13` `1.11.14` `1.11.2` `1.11.3` `1.11.4` `1.11.5` `1.11.6` `1.11.7` `1.11.8` `1.11.9`

Description

django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

References