DLA-4006-1 python-django - security update

Bulletin has no description...

CVE-2024-56363 APTRS has SSTI vulnerability

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...

APTRS 安全漏洞

APTRS Automated Penetration Testing Reporting System is a Python and Django based automated reporting tool from APTRS open source. Designed for penetration testers and security organizations. A security vulnerability exists in version 1.0 of APTRS, which stems from improper input cleanup in a web...

OPENSUSE-SU-2024:0408-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2024-53907: Fixed potential denial-of-service in django.utils.html.striptags boo1234232...

Security update for python-Django (moderate)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2024:0408-1 Rating: moderate References: 1234232 Cross-References: CVE-2024-53907 CVSS scores: CVE-2024-53907 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports...

SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2024:4285-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4285-1 advisory. - CVE-2024-53907: Fixed denial-of-service in django.utils.html.striptags bsc1234232 - CVE-2024-53908: Fixed SQL injection in...

SUSE-SU-2024:4285-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2024-53907: Fixed denial-of-service in django.utils.html.striptags bsc1234232 - CVE-2024-53908: Fixed SQL injection in HasKeylhs, rhs on Oracle bsc1234231...

OPENSUSE-SU-2024:14568-1 python310-Django-5.1.4-1.1 on GA media

These are all security issues fixed in the python310-Django-5.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

python310-Django4-4.2.17-1.1 on GA media (moderate)

python310-Django4-4.2.17-1.1 on GA media Announcement ID: openSUSE-SU-2024:14565-1 Rating: moderate Cross-References: CVE-2024-53907 CVE-2024-53908 CVSS scores: CVE-2024-53907 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-53908 SUSE : 9.1...

python310-django-ckeditor-6.7.2-1.1 on GA media (moderate)

python310-django-ckeditor-6.7.2-1.1 on GA media Announcement ID: openSUSE-SU-2024:14557-1 Rating: moderate Cross-References: CVE-2024-24815 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Ubuntu: Security Advisory (USN-7136-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7136-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : python-django (2024-c5c5671edb)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c5c5671edb advisory. Automatic update for python-django-4.2.11-1.fc41. Changelog Mon Apr 8 2024 Michel Lind - 4.2.11-1 - Update to 4.2.11 - Resolves CVE-2024-24680...

Fedora 41 : python-django (2024-396c94f0a3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-396c94f0a3 advisory. urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters. Tenable has extract...

Fedora 36 : python-django (2022-4094ccf096)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-4094ccf096 advisory. Automatic update for python-django-4.0.2-1.fc36. Changelog Wed Feb 2 2022 Matthias Runge - 4.0.2-1 - rebase to 4.0.2, fix for CVE-2022-22818...

python-django: Username enumeration through timing difference for users with unusable passwords

A vulnerability was found in Python-Django in the django.contrib.auth.backends.ModelBackend.authenticate method. This flaw allows remote attackers to enumerate users via a timing attack involving login requests for users with unusable passwords...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 18.0.3 (python-django) security update

An update for python-django is now available for Red Hat OpenStack Platform 18.0.3 Feature Release 1 Antelope. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

python-django: Potential denial-of-service in django.utils.translation.get_supported_language_variant()

A vulnerability was found in Python-Django in the getsupportedlanguagevariant function. The issue triggers when parsed with very long strings, including a specific set of characters, leading to a potential denial of service attack...

CVE-2024-52004

MediaCMS is an open source video and media CMS, written in Python/Django and React, featuring a REST API. MediaCMS has been prone to vulnerabilities that upon special cases can lead to remote code execution. All versions before v4.1.0 are susceptible, and users are highly recommended to...

CVE-2024-52004 Remote code execution vulnerabilities in MediaCMS

MediaCMS is an open source video and media CMS, written in Python/Django and React, featuring a REST API. MediaCMS has been prone to vulnerabilities that upon special cases can lead to remote code execution. All versions before v4.1.0 are susceptible, and users are highly recommended to...