CVE-2011-4138

Published Oct 19, 2011

Last updated 7 years ago

Overview

Description: The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect, which might allow remote attackers to trigger arbitrary GET requests with an unintended source IP address via a crafted Location header.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "96EC0AAD-1199-4CDB-B599-A7959A160CB6",
            "versionEndIncluding": "1.2.6"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:0.91:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C40AD94B-AC89-4404-973F-5E60468D06EA"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:0.95:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "529CD787-1C98-4F20-8A3D-90BF2B0BD790"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:0.95.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "65A952FB-3A74-4A39-8870-1F37059C9D12"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:0.96:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7E79CFED-F8BF-48E7-897D-D1FB508DC9E1"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F9023348-07A7-46E8-B45A-CC19563C5961"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "883C9BEA-8B02-42F7-90BB-F31CBCBF8B1E"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "59302184-7805-4D50-B25C-73E59DAA1E66"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "56846659-96C8-497C-8404-3975E5B6385B"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2DAB4639-B81D-412A-A081-EFF46737CA5D"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BF068CD9-B33A-4C51-9FBA-CFDAE91E174E"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26D338D9-1504-4933-B833-BD7F1864E89D"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD257D91-EF31-4103-9007-944603ABA271"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "99387F31-9E04-4A73-A1C6-C05F96A8DB38"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.2.1:2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F75FE4BB-2C64-404F-9347-25289556BE56"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "064C9403-8A43-42C7-A1FD-03CC49A32FB1"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5BCDB95B-88F2-466A-A4F9-4C080183E39B"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.2.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "17B99C62-A653-45C1-A061-05A8FAD52107"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.2.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DFA5071B-808F-490E-B407-37CD24ACCA47"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F5428AE-6B63-4D27-BCC4-F228264A6F0E"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.3:alpha1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "06F122AC-B9BF-4E27-A7C0-F3E7B5E8A907"
          },
          {
            "criteria": "cpe:2.3:a:djangoproject:django:1.3:alpha2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AF1504F2-968F-4E1A-A143-BE494E658DF0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References