CVE-2017-7233

CVE-2017-7233 is an open redirect vulnerability affecting Django versions 1.10.x before 1.10.7, 1.9.x before 1.9.13, and 1.8.x before 1.8.18. The flaw arises from an insufficient security check in the django.utils.http.is_safe_url() function, which incorrectly validates certain numeric URLs as safe for redirection. This could lead to an open redirect, and if a developer relies on this function for link safety, it could also enable Cross-Site Scripting (XSS) attacks. Rated with a CVSS v3.0 score of 6.1 (Medium), this vulnerability has a network attack vector, low attack complexity, and requires user interaction. The potential impact includes partial confidentiality and integrity compromise. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.