CVE-2011-0698: Djangoproject Django

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.

Affected products

• Djangoproject Django: version 1.1 only; version 1.1.0 only; version 1.1.2 only; version 1.1.3 only; version 1.2 only; version 1.2.1 only; …

Published 2011-02-14. Last modified 2026-06-16.