Linux Distros Unpatched Vulnerability : CVE-2020-15225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-filter is a generic system for filtering Django QuerySets based on user selections. In django- filter before version 2.4.0, automatically generated...

Fedora: Security Advisory for python-django-filter (FEDORA-2023-4dee6d0a76)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : python-django-filter (2023-4dee6d0a76)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4dee6d0a76 advisory. New upstream version Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for th...

Fedora: Security Advisory for python-django-filter (FEDORA-2021-1acbee2459)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for python-django-filter (FEDORA-2021-f213fea441)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

DEBIAN-CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

caluma (>=5.2.1, <=6.6.0), course-access-groups (0.3.0) +70 more potentially affected by CVE-2020-15225 via django-filter (>=2.0.0.dev1, <=2.3.0)

django-filter PYPI version =2.0.0.dev1, =5.2.1, =0.6.0, =0.7.0, =0.3.0a0, =0.8.1, =0.3.0, =0.7.2, =0.6.3, =0.5.4, =0.2.7, =0.6.1, =0.7.8 and more Source cves: CVE-2020-15225 Source advisory: OSV:PYSEC-2021-64...

camd (>=2020.5.19, <=2021.6.11.post4), dj-core-drf (>=0.1.0, <=0.2.1) +46 more potentially affected by CVE-2020-15225 via django-filter (1.1.0)

django-filter PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-filter and may be impacted: - camd =2020.5.19, =0.1.0, =0.4.12, =0.3.2, =1.0.0, =0.7.1, =0.2.3, =0.2.0, =0.3.0, =0.3.0, =0.1.0, =0.0.1, =0.0.16, =0.5.1, =0.1.0,...

CVE-2020-15225

CVE-2020-15225 affects django-filter prior to 2.4.0, where automatically generated NumberFilter fields could be exploited via input using exponential formats with large exponents, enabling DoS. The fix in 2.4.0+ adds a MaxValueValidator with default limit_value 1e50 on the NumberFilter form field...

caluma (>=5.2.1, <=6.6.0), course-access-groups (0.3.0) +70 more potentially affected by CVE-2020-15225 via django-filter (>=2.0.0.dev1, <=2.3.0)

django-filter PYPI version =2.0.0.dev1, =5.2.1, =0.6.0, =0.7.0, =0.3.0a0, =0.8.1, =0.3.0, =0.7.2, =0.6.3, =0.5.4, =0.2.7, =0.6.1, =0.7.8 and more Source cves: CVE-2020-15225 Source advisory: OSV:GHSA-X7GM-RFGV-W973...