ALT Linux Team

Package python-module-django update in sisyphus on 2015-11-27

ALT-PU-2015-2030-1

Package python-module-django updated to version 1.8.7-alt1 for branch sisyphus in task 153866.

Closed vulnerabilities

Published: 2015-12-07
Modified: 2025-04-12

CVE-2015-8213

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.

Severity: MEDIUM (5.0) Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top