Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 172

Export CSV
CVE-2014-0473

python-django: caching of anonymous pages could reveal CSRF token

The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Djangoproject Redhat
Products
Ubuntu Linux Django Openstack
CVE-2014-0474

python-django: MySQL typecasting

The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to "MySQL typecasting."

CVSS 2.0 · 10.0 Critical EPSS 4.8% KEV · Not listed
Vendors
Canonical Djangoproject Redhat
Products
Ubuntu Linux Django Openstack
CVE-2014-0480

Django: reverse() can generate URLs pointing to other hosts, leading to phishing attacks

The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.

CVSS 2.0 · 5.8 Medium EPSS 2.3% KEV · Not listed
Vendors
Djangoproject Opensuse
Products
Django Opensuse
CVE-2014-0481

Django: file upload denial of service

The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name.

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Debian Djangoproject Opensuse and 1 more
Products
Debian Linux Django Opensuse and 1 more
CVE-2014-0482

Django: RemoteUserMiddleware session hijacking

The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.

CVSS 2.0 · 6.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Djangoproject Opensuse
Products
Django Opensuse
CVE-2014-0483

Django: data leakage via querystring manipulation in admin

The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field parameter in a popup action to an admin change form page, as demonstrated by a /admin/auth/user/?pop=1&t=password URI.

CVSS 2.0 · 3.5 Low EPSS 2.0% KEV · Not listed
Vendors
Djangoproject Opensuse
Products
Django Opensuse
CVE-2014-1418

Django: cached data possibly served to the wrong session

Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers.

CVSS 2.0 · 6.4 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Djangoproject
Products
Ubuntu Linux Django
CVE-2014-3730

Django: insufficient URL validation could lead to redirects

The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com."

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 1 more
Products
Ubuntu Linux Debian Linux Django and 1 more
CVE-2015-0219

Django: WSGI header spoofing via underscore/dash conflation

Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X-Auth_User header.

CVSS 2.0 · 5.0 Medium EPSS 7.0% KEV · Not listed
Vendors
Djangoproject
Products
Django
CVE-2015-0220

Django: Mitigated possible XSS attack via user-supplied redirect URLs

The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL, related to redirect URLs, as demonstrated by a "\njavascript:" URL.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Djangoproject
Products
Ubuntu Linux Django
CVE-2015-0221

Django: denial of service attack against django.views.static.serve

The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.

CVSS 2.0 · 5.0 Medium EPSS 4.5% KEV · Not listed
Vendors
Canonical Djangoproject
Products
Ubuntu Linux Django
CVE-2015-0222

Django: database denial of service with ModelMultipleChoiceField

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Djangoproject
Products
Ubuntu Linux Django
CVE-2015-2241

Django: XSS attack via properties in ModelAdmin.readonly_fields

Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonly_fields, as demonstrated by a @property.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Djangoproject
Products
Django
CVE-2015-2316

Django: possible denial of service in strip_tags()

The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string.

CVSS 2.0 · 5.0 Medium EPSS 4.8% KEV · Not listed
Vendors
Canonical Djangoproject Fedoraproject and 2 more
Products
Ubuntu Linux Django Fedora and 2 more
CVE-2015-2317

Django: possible XSS attack via user-supplied redirect URLs

The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control character in a URL, as demonstrated by a \x08javascript: URL.

CVSS 2.0 · 4.3 Medium EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 3 more
Products
Ubuntu Linux Debian Linux Django and 3 more
CVE-2015-3982

django: incorrect session flushing in the cached_db backend

The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.

CVSS 2.0 · 5.0 Medium EPSS 1.8% KEV · Not listed
Vendors
Djangoproject
Products
Django
CVE-2015-5144

Django: possible header injection due to validators accepting newlines in input

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 1 more
Products
Ubuntu Linux Debian Linux Django and 1 more
CVE-2015-5145

Django: DoS via incorrect URL validation

validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

CVSS 2.0 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Djangoproject
Products
Django
CVE-2015-5963

python-django: Denial-of-service possibility in logout() view by filling session store

contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consumption or session record removal) via a large number of requests to contrib.auth.views.logout, which triggers the creation of an empty session record.

CVSS 2.0 · 5.0 Medium EPSS 5.2% KEV · Not listed
Vendors
Canonical Djangoproject Oracle and 1 more
Products
Ubuntu Linux Django Solaris and 1 more
CVE-2015-5964

python-django: Denial-of-service possibility in logout() view by filling session store

The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 5.1% KEV · Not listed
Vendors
Canonical Djangoproject Oracle and 1 more
Products
Ubuntu Linux Django Solaris and 1 more