Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-7D095365F7951016B48FBAE4DE71AFBFHistoryDec 07, 2015 - 12:00 a.m.
Settings leak in date template filter
2015-12-0700:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
10
0.007 Low
EPSS
Percentile
80.8%
If an application allows users to specify an unvalidated format for dates and passes this format to the date filter, a malicious user could obtain any secret in the application’s settings by specifying a settings key instead of a date format. e.g. SECRET_KEY instead of j/m/Y.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pypi/django | lt | 1.7.11 | |
| pypi/django | ge | 1.8.0a | |
| pypi/django | lt | 1.8.7 | |
| pypi/django | ge | 1.9a | |
| pypi/django | lt | 1.9rc2 |
Related
redhat
redhat
(RHSA-2016:0156) Moderate: python-django security update
2016-02-10 01:06:15
(RHSA-2016:0157) Moderate: python-django security update
2016-02-10 01:06:18
(RHSA-2016:0360) Moderate: python-django security update
2016-03-08 06:31:21
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0463)
2015-12-08 00:00:00
Debian Security Advisory DSA 3404-1 (python-django - security update)
2015-11-25 00:00:00
Debian: Security Advisory (DLA-349-1)
2023-03-08 00:00:00
nessus
nessus
Debian DLA-349-1 : python-django security update
2015-11-30 00:00:00
Fedora 23 : python-django-1.8.7-1.fc23 (2015-a8c8f60fbd)
2016-03-04 00:00:00
freebsd
freebsd
django -- information leak vulnerability
2015-11-24 00:00:00
mageia
mageia
Updated python-django packages fix security vulnerability
2015-12-05 02:31:36
altlinux
altlinux
debian
debian
[SECURITY] [DSA 3404-1] python-django security update
2015-11-25 17:32:31
[SECURITY] [DSA 3404-1] python-django security update
2015-11-25 17:32:31
[SECURITY] [DLA 349-1] python-django security update
2015-11-25 21:40:45
github
github
Django settings leak in date template filter
2022-05-17 03:25:24
cvelist
cvelist
CVE-2015-8213
2015-12-07 20:00:00
osv
osv
Django settings leak in date template filter
2022-05-17 03:25:24
PYSEC-2015-11
2015-12-07 20:59:00
debiancve
debiancve
CVE-2015-8213
2015-12-07 20:59:17
archlinux
archlinux
python-django, python2-django: information leakage
2015-12-05 00:00:00
veracode
veracode
Information Disclosure Through Date Template Filter
2019-01-15 09:10:00
ubuntucve
ubuntucve
CVE-2015-8213
2015-11-24 00:00:00
nvd
nvd
CVE-2015-8213
2015-12-07 20:59:17
cve
cve
CVE-2015-8213
2015-12-07 20:59:17
fedora
fedora
[SECURITY] Fedora 23 Update: python-django-1.8.7-1.fc23
2015-12-07 20:32:33
[SECURITY] Fedora 22 Update: python-django-1.8.7-1.fc22
2015-12-31 01:53:36
ubuntu
ubuntu
Django vulnerability
2015-11-24 00:00:00
prion
prion
Format string
2015-12-07 20:59:00