Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request.

- Mon May 19 2008 Michel Salim <salimma at     fedoraproject.org> - 0.96.2-1

    - XSS security update: CVE-2008-2302 (bz# 442757-60)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Bug #446402 - CVE-2008-2302 Django: administration     application XSS

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Mon May 19 2008 Michel Salim <salimma at     fedoraproject.org> - 0.96.2-1

    - XSS security update: CVE-2008-2302 (bz# 442757-60)

    - Sat Apr 5 2008 Michel Salim <salimma at       fedoraproject.org> - 0.96.1-2

    - Package .egg-info file on Fedora >= 9

    - Thu Nov 1 2007 Michel Salim <michel.sylvan at       gmail.com> 0.96.1-1

    - i18n security update: CVE-2007-5712, bz#357051

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Django project reports :

The Django administration application will, when accessed by a user who is not sufficiently authenticated, display a login form and ask the user to provide the necessary credentials before displaying the requested page. This form will be submitted to the URL the user attempted to access, by supplying the current request path as the value of the form's 'action' attribute.

The value of the request path was not being escaped, creating an opportunity for a cross-site scripting (XSS) attack by leading a user to a URL which contained URL-encoded HTML and/or JavaScript in the request path.

The remote host is using Django, a high-level Python web framework designed for rapid development of database-driven websites. 

The administration application included with the version of Django installed on the remote host fails to sanitize the URL before using it to generate dynamic HTML output.  An attacker may be able to leverage this to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected site.

ID	Name	Product	Family	Severity
32413	Fedora 9 : Django-0.96.2-1.fc9 (2008-4267)	Nessus	Fedora Local Security Checks	medium
32411	Fedora 8 : Django-0.96.2-1.fc8 (2008-4248)	Nessus	Fedora Local Security Checks	medium
32409	Fedora 7 : Django-0.96.2-1.fc7 (2008-4191)	Nessus	Fedora Local Security Checks	medium
32350	FreeBSD : django -- XSS vulnerability (f49ba347-2190-11dd-907c-001c2514716c)	Nessus	FreeBSD Local Security Checks	medium
32319	Django Administration Application Login Form XSS	Nessus	CGI abuses : XSS	medium

Detections

Analytics

CVE-2008-2302

medium

Tenable Plugins

medium

medium

medium

medium

medium