UBUNTU-CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

caluma (>=5.2.1, <=6.6.0), course-access-groups (0.3.0) +70 more potentially affected by CVE-2020-15225 via django-filter (>=2.0.0.dev1, <=2.3.0)

django-filter PYPI version =2.0.0.dev1, =5.2.1, =0.6.0, =0.7.0, =0.3.0a0, =0.8.1, =0.3.0, =0.7.2, =0.6.3, =0.5.4, =0.2.7, =0.6.1, =0.7.8 and more Source cves: CVE-2020-15225 Source advisory: OSV:PYSEC-2021-64...

django-arctic (0.9.5), django-bread (>=0.4.0, <=0.5.1) +2 more potentially affected by CVE-2020-15225 via django-filter (0.15.3)

django-filter PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-filter and may be impacted: - django-arctic 0.9.5 - django-bread =0.4.0, =0.23.0, =0.37.1 - silent-auction 0.1.3 Source cves: CVE-2020-15225 Source advisory:...

Design/Logic Flaw

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

PYSEC-2021-64

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

autogenerated-api (>=1.0.2, <=1.1.12), dj-core-drf (>=0.0.1, <=0.0.8) +11 more potentially affected by CVE-2020-15225 via django-filter (1.0.4)

django-filter PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django-filter and may be impacted: - autogenerated-api =1.0.2, =0.0.1, =0.7.3, =0.4.10, =0.9.35, =4.0.0, =5.0.0, =1.6.0, =1.3.0, =0.0.6, =0.0.12 Source cves: CVE-2020-1522...

Django 安全漏洞

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django-filter versions prior to 2.4.0, which stems from being...

CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

CVE-2020-15225 Denial of Service vulnerability in django-filter

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

CVE-2020-15225

CVE-2020-15225 affects django-filter prior to 2.4.0, where automatically generated NumberFilter fields could be exploited via input using exponential formats with large exponents, enabling DoS. The fix in 2.4.0+ adds a MaxValueValidator with default limit_value 1e50 on the NumberFilter form field...

CVE-2020-15225: Incorrect Conversion between Numeric Types

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

OPENSUSE-SU-2021:0597-1 Security update for python-django-registration

This update for python-django-registration fixes the following issues: Update to 3.1.2 boo1184427, CVE-2021-21416 Filter sensitive POST parameters in error reports Fix RemovedInDjango40Warning from Signal arguments This update was imported from the openSUSE:Leap:15.2:Update update project...

Django -- multiple vulnerabilities

Django Release reports: CVE-2021-31542:Potential directory-traversal via uploaded files. MultiPartParser, UploadedFile, and FieldFile allowed directory-traversal via uploaded files with suitably crafted file names...

Security update for python-django-registration (moderate)

openSUSE Security Update: Security update for python-django-registration Announcement ID: openSUSE-SU-2021:0597-1 Rating: moderate References: 1184427 Cross-References: CVE-2021-21416 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available...

django: potential SQL injection via "tolerance" parameter in GIS functions and aggregates on Oracle

A SQL-injection flaw was found in python-django, where GIS functions and aggregates in Oracle did not correctly neutralize tolerance-parameter data. A remote attacker could use this flaw to submit crafted data to inject malicious SQL...

openSUSE: Security Advisory for python-django-registration (openSUSE-SU-2021:0588-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Code injection

Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensure that link URLs use a valid protocol. A malicious user with access to the admin interface could...

PYSEC-2021-114

Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensure that link URLs use a valid protocol. A malicious user with access to the admin interface could...