Security Advisory

CVE-2011-0698

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-02-14 20:00:00

Last updated 2024-08-06 21:58:26

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.

← Browse all CVEs View on cve.org ↗