7620 matches found
The vulnerability of the MultiPartParser component in the Django web application framework, related to deficiencies in pathname restrictions for directories, allows attackers to access confidential data.
The vulnerability of the MultiPartParser component in the Django web application framework is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker to gain access to confidential data using files with specially created names...
Fedora: Security Advisory for python-django-filter (FEDORA-2021-f213fea441)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for python-django-filter (FEDORA-2021-1acbee2459)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: python-django-filter-21.1-1.fc35
Django-filter is a reusable Django application for allowing users to filter querysets dynamically...
The vulnerability of the TemplateDetailView function in the django/contrib/admindocs component of the Django web application’s software platform, related to vulnerabilities in pathname restrictions for directories, allows attackers to gain access to confidential data.
The vulnerability of the TemplateDetailView function in the django/contrib/admindocs component of the Django software development platform relates to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker to gain access to confidential data...
[SECURITY] Fedora 34 Update: python-django-filter-21.1-1.fc34
Django-filter is a reusable Django application for allowing users to filter querysets dynamically...
The vulnerability of the MultiPartParser, UploadedFile, and FieldFile components of the Django web application framework lies in the lack of restrictions on file uploads. This allows attackers to gain access to confidential data.
The vulnerability of the MultiPartParser, UploadedFile, and FieldFile components of the Django web application framework lies in the lack of restrictions on file uploads. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data using files with specially...
vulhub
This is an open-source collection of vulnerable web applications and environments for testing and learning about web application security. It is a project maintained by phith0n and hosted on GitHub. The project provides a variety of vulnerable applications and environments, including web servers,...
Exploit for SQL Injection in Djangoproject Django
CVE-2020-7471 这个仓库提供 CVE-2020-7471 Potential SQL injection via StringAggdelimiter 漏洞的环境和 POC 受影响的 django 版本 - 1.11 到 1.11.28（不含） - 2.2 到 2.2.10（不含） - 3.0 到 3.0.3（不含） 下载使用前需要如下操作： 1. 安装 django 漏洞版本，我测试用的是 python pip install django==3.0.2 -i https://pypi.tuna.tsinghua.edu.cn/simple 2. 参考...
Cross-site scripting in Unicorn framework
The Unicorn framework through 0.35.3 for Django allows XSS via component.name...
GHSA-C87F-FQ5G-63R2 Cross-site scripting in Unicorn framework
The Unicorn framework through 0.35.3 for Django allows XSS via component.name...
Cross-site Scripting in django-unicorn
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...
GHSA-GGMV-6Q9P-9GM6 Cross-site Scripting in django-unicorn
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...
CVE-2021-42134
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...
CVE-2021-42134
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...
PYSEC-2021-369
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...
Cross site scripting
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...
CVE-2021-42134
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...
PYSEC-2021-369
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...
CVE-2021-42134
The CVE-2021-42134 entry refers to the Unicorn framework for Django (pre-0.36.1) being vulnerable to cross-site scripting via a component (component or component.name). The issue notes that this XSS stems from an incomplete fix for CVE-2021-42053, indicating the root cause is a fix that did not f...