CVE-2017-7233 Red Hat Update for python-django for Red Hat OpenStack Platform 11.0 (Ocata). (RHSA-2017:3093)

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design.

A redirect flaw, where the is_safe_url() function did not correctly sanitize numeric-URL user input, was found in python-django. A remote attacker could exploit this flaw to perform XSS attacks against the OpenStack dashboard. (CVE-2017-7233)

Affected Products
Red Hat OpenStack 11 x86_64

A remote attacker could exploit this flaw to perform XSS attacks against the OpenStack dashboard.

Upgrade to the latest packages which contain a patch. Refer to Applying Package Updates to RHEL system for details.

Refer to Red Hat security advisory RHSA-2017:3093 to address this issue and obtain more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

RHSA-2017:3093: Red Hat Enterprise Linux