🔙 목록으로 돌아가기

CVE-2018-14574: Django - Open Redirect

TitleDjango - Open Redirect
Authorpikpikcu
SeverityMedium
ImpactAn attacker can craft a malicious URL that redirects users to a malicious website, leading to potential phishing attacks or the exploitation of other vulnerabilities.
RemediationUpgrade to the latest version of Django or apply the relevant patch provided by the Django project.
CVSS Score6.1
EPSS Score0.09501
CVE IDCVE-2018-14574
CWE IDCWE-601
Shodan Querycpe:"cpe:2.3:a:djangoproject:django"
Tags cve cve2018 django redirect djangoproject vuln

🔍 Vulnerability Description

Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 contains an open redirect vulnerability. If django.middleware.common.CommonMiddleware and APPEND_SLASH settings are selected, and if the project has a URL pattern that accepts any path ending in a slash, an attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET //www.interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/15.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14574.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-14574.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A