Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2015-8213 — MEDIUM severity vulnerability | Release Alert

CVE-2015-8213

MEDIUMCVSS v2

Published

December 7, 2015

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.

django/django

GitHubThe Web framework for perfectionists with deadlines.

= 1.8.2, = 1.9.0, = 1.8.1, = 1.8.3, = 1.8.4, = 1.8.0, <= 1.7.10, = 1.8.6, = 1.8.5, >= 1.7, < 1.7.11, >= 1.8a1, < 1.8.7, >= 1.9a1, < 1.9rc2, < 1.7.11, >= 1.8, < 1.8.7, >= 1.9a0, < 1.9rc2NVD

Django

Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.

= 1.8.2, = 1.9.0, = 1.8.1, = 1.8.3, = 1.8.4, = 1.8.0, <= 1.7.10, = 1.8.6, = 1.8.5, >= 1.7, < 1.7.11, >= 1.8a1, < 1.8.7, >= 1.9a1, < 1.9rc2, < 1.7.11, >= 1.8, < 1.8.7, >= 1.9a0, < 1.9rc2NVD

More on this CVE

NVD↗GitHub Advisory↗

django

Docker HubDEPRECATED; use "python" instead

= 1.8.2, = 1.9.0, = 1.8.1, = 1.8.3, = 1.8.4, = 1.8.0, <= 1.7.10, = 1.8.6, = 1.8.5, >= 1.7, < 1.7.11, >= 1.8a1, < 1.8.7, >= 1.9a1, < 1.9rc2, < 1.7.11, >= 1.8, < 1.8.7, >= 1.9a0, < 1.9rc2NVD

django

NPMsecurity holding package

= 1.8.2, = 1.9.0, = 1.8.1, = 1.8.3, = 1.8.4, = 1.8.0, <= 1.7.10, = 1.8.6, = 1.8.5, >= 1.7, < 1.7.11, >= 1.8a1, < 1.8.7, >= 1.9a1, < 1.9rc2, < 1.7.11, >= 1.8, < 1.8.7, >= 1.9a0, < 1.9rc2NVD