Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-0472
5.1
MEDIUMCVSS v2
Severity scale
010
Description
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.<= 1.4.10, = 1.4.9, = 1.4.6, = 1.4.3, = 1.4.4, = 1.4.5, = 1.4.2, = 1.4.7, = 1.4.8, = 1.4, = 1.4.1, = 1.6, = 1.6.1, = 1.6.2, = 1.7, = 1.5, = 1.5.1, = 1.5.3, = 1.5.4, = 1.5.5, = 1.5.2, < 1.4.11, >= 1.5, < 1.5.6, >= 1.6, < 1.6.3NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.<= 1.4.10, = 1.4.9, = 1.4.6, = 1.4.3, = 1.4.4, = 1.4.5, = 1.4.2, = 1.4.7, = 1.4.8, = 1.4, = 1.4.1, = 1.6, = 1.6.1, = 1.6.2, = 1.7, = 1.5, = 1.5.1, = 1.5.3, = 1.5.4, = 1.5.5, = 1.5.2, < 1.4.11, >= 1.5, < 1.5.6, >= 1.6, < 1.6.3NVD