Description

Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.

Remediation

References

CVE-2010-3082

Related Vulnerabilities

WordPress Plugin Multisite Plugin Manager Multiple Cross-Site Scripting Vulnerabilities (3.1.1)

MySQL CVE-2015-0506 Vulnerability (CVE-2015-0506)

Joomla Improper Input Validation Vulnerability (CVE-2018-12712)

OpenSSL Numeric Errors Vulnerability (CVE-2007-5135)

PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2005-0247)

Severity

Medium

Classification

CVE-2010-3082 CWE-707

Tags

Missing Update Known Vulnerabilities