CVE-2024-25170-Mezzanine-v6.0.0

Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-25170 Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host Header. POC is coming soon:...

CVE-2024-25169-Mezzanine-v6.0.0

Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-25169 Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via crafted request. POC...

Mezzanine-CMS-6.1.0-XSS

Mezzanine-CMS-6.1.0-XSS CVE-2025-50481 Description A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post. CVE: CVE-2025-50481 Affected version:...

mezzanine (>=3.0.0, <=3.0.4) potentially affected by CVE-2024-47081 via requests (1.2.3)

requests PYPI version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on requests and may be impacted: - mezzanine =3.0.0, =3.0.4 Source cves: CVE-2024-47081 Source advisory: OSV:PYSEC-2026-1872...

mezzanine (>=3.0.0, <=3.0.4) potentially affected by CVE-2024-35195 via requests (1.2.3)

requests PYPI version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on requests and may be impacted: - mezzanine =3.0.0, =3.0.4 Source cves: CVE-2024-35195 Source advisory: OSV:PYSEC-2026-1873...

PYSEC-2026-1627 Mezzanine allows attackers to bypass access control mechanisms

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

Mezzanine allows attackers to bypass access controls via manipulating the Host header

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

open-helpdesk (>=0.4.1, <=0.4.4) potentially affected by CVE-2024-25170 via mezzanine (3.1.10)

mezzanine PYPI version 3.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - open-helpdesk =0.4.1, =0.4.4 Source cves: CVE-2024-25170 Source advisory: OSV:PYSEC-2026-1626...

open-helpdesk (>=0.4.1, <=0.4.4) potentially affected by CVE-2024-25169 via mezzanine (3.1.10)

mezzanine PYPI version 3.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - open-helpdesk =0.4.1, =0.4.4 Source cves: CVE-2024-25169 Source advisory: OSV:PYSEC-2026-1627...

cartridge-braintree (>=1.2.1, <=1.2.2), mezzanine-seminars (>=0.1.0b1, <=1.7.1) potentially affected by CVE-2024-25169 via mezzanine (4.3.1)

mezzanine PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - cartridge-braintree =1.2.1, =0.1.0b1, =1.7.1 Source cves: CVE-2024-25169 Source advisory: OSV:PYSEC-2026-1627...

mezzanine-api (>=0.1.0a1, <=0.7.1) potentially affected by CVE-2024-25169 via mezzanine (6.0.0)

mezzanine PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - mezzanine-api =0.1.0a1, =0.7.1 Source cves: CVE-2024-25169 Source advisory: OSV:PYSEC-2026-1627...

mezzanine-api (>=0.1.0a1, <=0.7.1) potentially affected by CVE-2024-25170 via mezzanine (6.0.0)

mezzanine PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - mezzanine-api =0.1.0a1, =0.7.1 Source cves: CVE-2024-25170 Source advisory: OSV:PYSEC-2026-1626...

cartridge (>=1.0.0b1, <=1.3.1) potentially affected by CVE-2024-25170 via mezzanine (5.1.4)

mezzanine PYPI version 5.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - cartridge =1.0.0b1, =1.3.1 Source cves: CVE-2024-25170 Source advisory: OSV:PYSEC-2026-1626...

cartridge-braintree (>=1.2.1, <=1.2.2), mezzanine-seminars (>=0.1.0b1, <=1.7.1) potentially affected by CVE-2024-25170 via mezzanine (4.3.1)

mezzanine PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - cartridge-braintree =1.2.1, =0.1.0b1, =1.7.1 Source cves: CVE-2024-25170 Source advisory: OSV:PYSEC-2026-1626...

django-clubhouse (>=0.0.1, <=0.2.19) potentially affected by CVE-2024-25169 via mezzanine (4.1.0)

mezzanine PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - django-clubhouse =0.0.1, =0.2.19 Source cves: CVE-2024-25169 Source advisory: OSV:PYSEC-2026-1627...

django-clubhouse (>=0.0.1, <=0.2.19) potentially affected by CVE-2024-25170 via mezzanine (4.1.0)

mezzanine PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - django-clubhouse =0.0.1, =0.2.19 Source cves: CVE-2024-25170 Source advisory: OSV:PYSEC-2026-1626...

cartridge (>=1.0.0b1, <=1.3.1) potentially affected by CVE-2024-25169 via mezzanine (5.1.4)

mezzanine PYPI version 5.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - cartridge =1.0.0b1, =1.3.1 Source cves: CVE-2024-25169 Source advisory: OSV:PYSEC-2026-1627...

PYSEC-2026-1626 Mezzanine allows attackers to bypass access controls via manipulating the Host header

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

Mezzanine allows attackers to bypass access control mechanisms

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

mezzanine (>=3.0.0, <=3.0.4) potentially affected by CVE-2026-25645 via requests (1.2.3)

requests PYPI version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on requests and may be impacted: - mezzanine =3.0.0, =3.0.4 Source cves: CVE-2026-25645 Source advisory: OSV:PYSEC-2026-2275...