Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2019-12781

An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings are used, and the proxy connects to Django via HTTPS. In other words, django.http.HttpRequest.scheme has incorrect behavior when a client uses HTTP.

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
djangoproject / django 1.11 1.11.22
djangoproject / django 2.1 2.1.10
djangoproject / django 2.2 2.2.3
canonical / ubuntu_linux 16.04 16.04.x
debian / debian_linux 9.0 9.0.x
canonical / ubuntu_linux 18.04 18.04.x
canonical / ubuntu_linux 18.10 18.10.x
canonical / ubuntu_linux 19.04 19.04.x
Python icon Django 1.11.0 1.11.22
Python icon Django 2.1.0 2.1.10
Python icon Django 2.2.0 2.2.3