CVE-2013-6044

Name of the Vulnerable Software and Affected Versions Django versions 1.4.x through 1.4.5 Django versions 1.5.x through 1.5.1 Django versions 1.6 before beta 2

Description The issue in the is safe url function in utils/http.py might introduce cross-site scripting (XSS) or other issues into applications that use this function. This is demonstrated by the login view in django.contrib.auth.views and the javascript: scheme.

Recommendations For Django versions 1.4.x through 1.4.5, update to version 1.4.6 or later. For Django versions 1.5.x through 1.5.1, update to version 1.5.2 or later. For Django versions 1.6 before beta 2, update to beta 2 or later.