CVE-2010-3082

Django <1.2.2 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.

References (6)

[Mailing List] http://marc.info/?l=oss-security&m=128403961700444&w=2

[Patch, Vendor Advisory] http://www.djangoproject.com/weblog/2010/sep/08/security-release/

[Patch] http://www.securityfocus.com/bid/43116

[Vendor Advisory] http://www.ubuntu.com/usn/USN-1004-1

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/61729

[Issue Tracking] https://bugzilla.redhat.com/show_bug.cgi?id=632239

Scores

EPSS 0.0041

EPSS Percentile 60.8%

Classification

CWE

CWE-79

Status published

Affected Products (5)

djangoproject/django

pypi/Django < 1.2.2PyPI

n/a/n/a

Timeline

Published Sep 14, 2010

Tracked Since Feb 18, 2026