Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2009-2659
5
MEDIUMCVSS v2
Published
August 4, 2009
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.0, = 0.96, >= 0.96.0, < 0.96.4, >= 1.0, < 1.0.3, < 1.1NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.0, = 0.96, >= 0.96.0, < 0.96.4, >= 1.0, < 1.0.3, < 1.1OSV