16007 matches found
Code injection
Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
PYSEC-2023-82
Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
tendenci (>=11.0.0, <=11.3.1) potentially affected by CVE-2023-33185 via django-ses (0.7.1)
django-ses PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - tendenci =11.0.0, =11.3.1 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...
django-ses-sns-tracker (1.1.5) potentially affected by CVE-2023-33185 via django-ses (1.0.3)
django-ses PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - django-ses-sns-tracker 1.1.5 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...
tendenci (>=14.0.3, <=14.4.0) potentially affected by CVE-2023-33185 via django-ses (2.2.0)
django-ses PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - tendenci =14.0.3, =14.4.0 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...
PYSEC-2023-82
Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
tendenci (>=11.4.0, <=11.4.9) potentially affected by CVE-2023-33185 via django-ses (0.8.12)
django-ses PYPI version 0.8.12 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - tendenci =11.4.0, =11.4.9 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...
speedpycom (0.1.5) potentially affected by CVE-2023-33185 via django-ses (2.6.1)
django-ses PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - speedpycom 0.1.5 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...
CVE-2023-33185
Django-SES (django_ses) exposes a SESEventWebhookView to verify AWS-signed requests for bounces/subscriptions. The vulnerability was due to a flawed signature verification that allowed specifying arbitrary public certificates. The issue affects django_ses up to version prior to 3.5.0 and was fixe...
CVE-2023-33185 Incorrect signature verification in django-ses
Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
CVE-2023-33185 Incorrect signature verification in django-ses
Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
CVE-2023-33185 Incorrect signature verification in django-ses
Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
django-ses-sns-tracker (1.1.5), speedpycom (0.1.5) +1 more potentially affected by CVE-2023-33185 via django-ses (>=0.7.1, <=2.6.1)
django-ses PYPI version =0.7.1, =11.0.0, =14.4.0 Source cves: CVE-2023-33185 Source advisory: MEND:CVE-2023-33185...
Django-SES data forgery vulnerability
Django-SES is the Django email backend for Amazon Simple Email Service. A security vulnerability exists in Django-SES versions prior to 3.5.0 that stems from allowing users to specify arbitrary public certificates...
CVE-2023-33185: Improper Verification of Cryptographic Signature
Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
Ubuntu: Security Advisory (USN-6054-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
django-omnibus (>=0.1.0, <=0.2.0) potentially affected by CVE-2023-28370 via tornado (3.1.1)
tornado PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - django-omnibus =0.1.0, =0.2.0 Source cves: CVE-2023-28370 Source advisory: OSV:GHSA-HJ3F-6GCP-JG8J...
django-omnibus (>=0.1.0, <=0.2.0) potentially affected by CVE-2023-28370 via tornado (3.1.1)
tornado PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - django-omnibus =0.1.0, =0.2.0 Source cves: CVE-2023-28370 Source advisory: OSV:PYSEC-2023-75...
USN-6054-2 python-django vulnerability
USN-6054-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Moataz Al-Sharida and nawaik discovered that Django incorrectly handled uploading multiple files using one form field. A remote attacker...
USN-6054-2: Django vulnerability
USN-6054-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Moataz Al-Sharida and nawaik discovered that Django incorrectly handled uploading multiple files using one form field. A remote attacker...