mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-09 23:27:33 +02:00
20 lines
793 B
Markdown
20 lines
793 B
Markdown
### [CVE-2017-7234](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7234)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
No PoCs from references.
|
|
|
|
#### Github
|
|
- https://github.com/ARPSyndicate/cvemon
|
|
- https://github.com/Crossroadsman/treehouse-techdegree-python-project9
|
|
- https://github.com/leoChristofoli/CRUD-170406
|
|
|