Lucene search
HistoryMay 02, 2013 - 2:55 p.m.
CVE-2013-0305
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.5%
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.
Affected configurations
Node
djangoprojectdjangoMatch1.3
ORdjangoprojectdjangoMatch1.3alpha1
ORdjangoprojectdjangoMatch1.3beta1
ORdjangoprojectdjangoMatch1.3.1
ORdjangoprojectdjangoMatch1.3.2
ORdjangoprojectdjangoMatch1.3.3
Node
djangoprojectdjangoMatch1.4
ORdjangoprojectdjangoMatch1.4alpha
ORdjangoprojectdjangoMatch1.4beta
ORdjangoprojectdjangoMatch1.4.1
ORdjangoprojectdjangoMatch1.4.2
Node
djangoprojectdjangoMatch1.5alpha
ORdjangoprojectdjangoMatch1.5beta
Node
canonicalubuntu_linuxMatch10.04-lts
ORcanonicalubuntu_linuxMatch11.10
ORcanonicalubuntu_linuxMatch12.04-lts
ORcanonicalubuntu_linuxMatch12.10
Related
cve
cve
CVE-2013-0305
2013-05-02 14:55:05
osv
osv
Django Data leakage via admin history log
2022-05-05 02:48:46
PYSEC-2013-16
2013-05-02 14:55:00
python-django - several vulnerabilities
2013-02-27 00:00:00
gitlab
gitlab
Exposure of Sensitive Information to an Unauthorized Actor
2022-05-05 00:00:00
debiancve
debiancve
CVE-2013-0305
2013-05-02 14:55:05
prion
prion
Information disclosure
2013-05-02 14:55:00
github
github
Django Data leakage via admin history log
2022-05-05 02:48:46
cvelist
cvelist
CVE-2013-0305
2013-05-02 14:00:00
ubuntucve
ubuntucve
CVE-2013-0305
2013-02-20 00:00:00
veracode
veracode
Information Disclosure Through Escalation Of Privileges
2019-01-15 09:00:39
nessus
nessus
Fedora 18 : python-django-1.4.5-2.fc18 (2013-2843)
2013-03-13 00:00:00
Fedora 17 : Django-1.4.5-1.fc17 (2013-2874)
2013-03-13 00:00:00
openSUSE Security Update : python-django (openSUSE-SU-2013:1203-1)
2014-06-13 00:00:00
openvas
openvas
Fedora Update for python-django FEDORA-2013-2843
2013-03-15 00:00:00
Fedora Update for python-django FEDORA-2013-2843
2013-03-15 00:00:00
Debian: Security Advisory (DSA-2634-1)
2013-02-26 00:00:00
seebug
seebug
Django 1.3/1.4 ćçťćĺĄĺ俥ćŻćłé˛ćźć´
2013-02-22 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: python-django-1.4.5-2.fc18
2013-03-12 08:49:59
[SECURITY] Fedora 17 Update: Django-1.4.5-1.fc17
2013-03-12 08:54:04
debian
debian
[SECURITY] [DSA 2634-1] python-django security update
2013-02-26 23:58:40
securityvulns
securityvulns
[SECURITY] [DSA 2634-1] python-django security update
2013-03-03 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2013-02-21 00:00:00
redhat
redhat
(RHSA-2013:0670) Moderate: Django security update
2013-03-21 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2013-03-07 00:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.5%
Related for NVD:CVE-2013-0305