Lucene search
Veracode Vulnerability DatabaseVERACODE:11348HistoryJan 15, 2019 - 9:00 a.m.
Information Disclosure Through Escalation Of Privileges
2019-01-1509:00:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.001
Percentile
48.5%
Django is vulnerable to information disclosure through escalation of privileges. The admin interface does not check user permissions correctly for viewing object history.
References
rhn.redhat.com/errata/RHSA-2013-0670.html
ubuntu.com/usn/usn-1757-1
www.debian.org/security/2013/dsa-2634
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=913037
bugzilla.redhat.com/show_bug.cgi?id=913039
rhn.redhat.com/errata/RHSA-2013-0670.html
www.djangoproject.com/weblog/2013/feb/19/security/
Related
cvelist
cvelist
CVE-2013-0305
2013-05-02 14:00:00
github
github
Django Data leakage via admin history log
2022-05-05 02:48:46
debiancve
debiancve
CVE-2013-0305
2013-05-02 14:55:05
prion
prion
Information disclosure
2013-05-02 14:55:00
osv
osv
Django Data leakage via admin history log
2022-05-05 02:48:46
PYSEC-2013-16
2013-05-02 14:55:00
python-django - several vulnerabilities
2013-02-27 00:00:00
gitlab
gitlab
Exposure of Sensitive Information to an Unauthorized Actor
2022-05-05 00:00:00
cve
cve
CVE-2013-0305
2013-05-02 14:55:05
nvd
nvd
CVE-2013-0305
2013-05-02 14:55:05
ubuntucve
ubuntucve
CVE-2013-0305
2013-02-20 00:00:00
nessus
nessus
Fedora 17 : Django-1.4.5-1.fc17 (2013-2874)
2013-03-13 00:00:00
Fedora 18 : python-django-1.4.5-2.fc18 (2013-2843)
2013-03-13 00:00:00
openSUSE Security Update : python-django (openSUSE-SU-2013:1203-1)
2014-06-13 00:00:00
openvas
openvas
Fedora Update for python-django FEDORA-2013-2843
2013-03-15 00:00:00
Fedora Update for python-django FEDORA-2013-2843
2013-03-15 00:00:00
Debian: Security Advisory (DSA-2634-1)
2013-02-26 00:00:00
seebug
seebug
Django 1.3/1.4 ćçťćĺĄĺ俥ćŻćłé˛ćźć´
2013-02-22 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: python-django-1.4.5-2.fc18
2013-03-12 08:49:59
[SECURITY] Fedora 17 Update: Django-1.4.5-1.fc17
2013-03-12 08:54:04
debian
debian
[SECURITY] [DSA 2634-1] python-django security update
2013-02-26 23:58:40
securityvulns
securityvulns
[SECURITY] [DSA 2634-1] python-django security update
2013-03-03 00:00:00
redhat
redhat
(RHSA-2013:0670) Moderate: Django security update
2013-03-21 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2013-02-21 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2013-03-07 00:00:00