django-anymail Includes Sensitive Information in Log Files

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

GHSA-QH9X-MC42-VG4G django-anymail Includes Sensitive Information in Log Files

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

django-saas-email (0.1.21) potentially affected by CVE-2018-1000089 via django-anymail (0.9.0)

django-anymail PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-anymail and may be impacted: - django-saas-email 0.1.21 Source cves: CVE-2018-1000089 Source advisory: GHSA-QH9X-MC42-VG4G...

django-saas-email (0.1.21) potentially affected by CVE-2018-1000089 via django-anymail (0.9.0)

django-anymail PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-anymail and may be impacted: - django-saas-email 0.1.21 Source cves: CVE-2018-1000089 Source advisory: OSV:GHSA-QH9X-MC42-VG4G...

GHSA-HXF9-7H4C-F5JV Django-Anymail prone to a timing attack

webhooks/base.py in Anymail aka django-anymail before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOKAUTHORIZATION secret, which allows remote attackers to post arbitrary e-mail tracking events...

Django-Anymail prone to a timing attack

webhooks/base.py in Anymail aka django-anymail before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOKAUTHORIZATION secret, which allows remote attackers to post arbitrary e-mail tracking events...

Information Disclosure

django-anymail is vulnerable to information disclosure. When an error occurs, the value of the WEBHOOKAUTHORIZATION setting is printed in the Django error reports. This may allow anyone with access to the logs to discover the webhook shared secret and send inbound/tracking events to your...

CVE-2018-1000089

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

CVE-2018-1000089

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

CVE-2018-1000089

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

Design/Logic Flaw

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

django-saas-email (0.1.21) potentially affected by CVE-2018-1000089 via django-anymail (0.9.0)

django-anymail PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-anymail and may be impacted: - django-saas-email 0.1.21 Source cves: CVE-2018-1000089 Source advisory: OSV:PYSEC-2018-46...

PYSEC-2018-46

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

PYSEC-2018-46

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

CVE-2018-1000089

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

CVE-2018-1000089

The CVE-2018-1000089 entry relates to django-anymail (versions 0.2 to 1.3) exposing a CWE-532/CWE-209 flaw in the WEBHOOK_AUTHORIZATION setting. An attacker who can access Django error logs could discover ANYMAIL_WEBHOOK and post fabricated inbound/tracking events, potentially impacting the targe...

CVE-2018-1000089

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...

django-saas-email (0.1.21) potentially affected by CVE-2018-1000089 via django-anymail (0.9.0)

django-anymail PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-anymail and may be impacted: - django-saas-email 0.1.21 Source cves: CVE-2018-1000089 Source advisory: MEND:CVE-2018-1000089...

PT-2018-9268

Name of the Vulnerable Software and Affected Versions: django-anymail versions 0.2 through 1.3 Description: The issue is related to the WEBHOOK AUTHORIZATION setting value, which can be exploited by an attacker with access to error logs to fabricate email tracking events. This can happen if Djang...

CVE-2018-1000089: Insertion of Sensitive Information into Log File

Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...