Lucene search
GoogleOSV:GHSA-RVQ6-MRPV-M6RMHistoryMay 17, 2022 - 3:07 a.m.
Code Injection in Django
2022-05-1703:07:04
Google
osv.dev
24
security
django
code injection
EPSS
0.022
Percentile
89.5%
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a “dotted Python path.”
References
lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
rhn.redhat.com/errata/RHSA-2014-0456.html
rhn.redhat.com/errata/RHSA-2014-0457.html
secunia.com/advisories/61281
www.debian.org/security/2014/dsa-2934
www.ubuntu.com/usn/USN-2169-1
nvd.nist.gov/vuln/detail/CVE-2014-0472
www.djangoproject.com/weblog/2014/apr/21/security
Related
debiancve
debiancve
CVE-2014-0472
2014-04-23 15:55:02
osv
osv
PYSEC-2014-1
2014-04-23 15:55:00
python-django - security update
2014-05-19 00:00:00
prion
prion
Path traversal
2014-04-23 15:55:00
cvelist
cvelist
CVE-2014-0472
2014-04-23 14:00:00
cve
cve
CVE-2014-0472
2014-04-23 15:55:02
gitlab
gitlab
Unexpected code execution using reverse()
2014-04-23 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:01:30
github
github
Code Injection in Django
2022-05-17 03:07:04
nvd
nvd
CVE-2014-0472
2014-04-23 15:55:02
ubuntucve
ubuntucve
CVE-2014-0472
2014-04-22 00:00:00
redhat
redhat
(RHSA-2014:0456) Moderate: Django security update
2014-04-30 00:00:00
(RHSA-2014:0457) Moderate: Django security update
2014-04-30 00:00:00
openvas
openvas
Ubuntu Update for python-django USN-2169-1
2014-05-02 00:00:00
Ubuntu Update for python-django USN-2169-2
2014-05-02 00:00:00
Ubuntu: Security Advisory (USN-2169-2)
2014-05-02 00:00:00
ubuntu
ubuntu
Django regression
2014-04-23 00:00:00
Django vulnerabilities
2014-04-22 00:00:00
mageia
mageia
Updated python-django packages fix multiple vulnerabilities
2014-04-28 19:54:39
nessus
nessus
Ubuntu 14.04 LTS : Django regression (USN-2169-2)
2014-04-23 00:00:00
FreeBSD : django -- multiple vulnerabilities (59e72db2-cae6-11e3-8420-00e0814cab4e)
2014-04-24 00:00:00
Ubuntu 14.04 LTS : Django vulnerabilities (USN-2169-1)
2014-04-23 00:00:00
ibm
ibm
freebsd
freebsd
django -- multiple vulnerabilities
2014-04-21 00:00:00
gentoo
gentoo
Django: Multiple vulnerabilities
2014-06-26 00:00:00
debian
debian
[SECURITY] [DSA 2934-1] python-django security update
2014-05-19 20:39:58
[SECURITY] [DSA 2934-1] python-django security update
2014-05-19 20:39:58
securityvulns
securityvulns
[SECURITY] [DSA 2934-1] python-django security update
2014-06-14 00:00:00