ALT Linux Team

Package python-module-django update in sisyphus on 2015-11-27

ALT-PU-2015-2030-2

Package python-module-django updated to version 1.8.7-alt1 for branch sisyphus in task 153866.

Closed vulnerabilities

Published: 2015-12-07
Modified: 2025-04-12

CVE-2015-8213

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.

Severity: MEDIUM (5.0)Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
Published: 2022-05-17
Modified: 2024-09-18

GHSA-6wcr-wcqm-3mfh

Django settings leak in date template filter

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
References:
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: 2.1.2
Back to top