PT-2015-7744
CVE-2015-8213
·
تاريخ النشر
2015-11-24
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 4.0
6.9
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Django versions 1.7.x before 1.7.11
Django versions 1.8.x before 1.8.7
Django versions 1.9.x before 1.9rc2
Description
The issue allows remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by the
SECRET KEY. This occurs due to a problem in the get format function in utils/formats.py.Recommendations
For Django versions 1.7.x before 1.7.11, update to version 1.7.11 or later.
For Django versions 1.8.x before 1.8.7, update to version 1.8.7 or later.
For Django versions 1.9.x before 1.9rc2, update to version 1.9rc2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾