Django CSRF Token HTML Injection Vulnerability

Bugtraq ID:	43116
Class:	Input Validation Error
CVE:	CVE-2010-3082
Remote:	Yes
Local:	No
Published:	Sep 08 2010 12:00AM
Updated:	Apr 16 2015 06:14PM
Credit:	Jeff Balogh of Mozilla
Vulnerable:	Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Expinion.net Member Management System 4.0 Django Django development trunk Django Django 1.2
Not Vulnerable:	Django Django 1.2.2

Django CSRF Token HTML Injection Vulnerability

Django is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Django 1.2 and the development trunk are vulnerable; other versions may also be affected.

Django CSRF Token HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

Django CSRF Token HTML Injection Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu python-django-doc_1.2.3-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python-django/python-dja ngo-doc_1.2.3-1ubuntu0.1_all.deb


• Ubuntu python-django_1.2.3-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python-django/python-dja ngo_1.2.3-1ubuntu0.1_all.deb

Djangoproject Django 1.2

• Django Django-1.2.2.tar.gz
  http://www.djangoproject.com/download/1.2.2/tarball/

Djangoproject Django development trunk 0

• Django Django-1.2.2.tar.gz
  http://www.djangoproject.com/download/1.2.2/tarball/

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu python-django-doc_1.2.3-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python-django/python-dja ngo-doc_1.2.3-1ubuntu0.1_all.deb


• Ubuntu python-django_1.2.3-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python-django/python-dja ngo_1.2.3-1ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu python-django-doc_1.2.3-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python-django/python-dja ngo-doc_1.2.3-1ubuntu0.1_all.deb


• Ubuntu python-django_1.2.3-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python-django/python-dja ngo_1.2.3-1ubuntu0.1_all.deb

Django CSRF Token HTML Injection Vulnerability

References:

• Django Homepage (Django)
  
• Security release issued (Django)