Lucene search

K
archlinuxArch LinuxASA-201503-7
HistoryMar 11, 2015 - 12:00 a.m.

python2-django python-django - cross site scripting

2015-03-1100:00:00
Arch Linux
lists.archlinux.org
17

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

64.8%

XSS attack via properties in ModelAdmin.readonly_fields

OSVersionArchitecturePackageVersionFilename
anyanyanypython2-django< 1.7.6.-1UNKNOWN
anyanyanypython-django< 1.7.6-1UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

64.8%