Lucene search
+L

50 matches found

OSV
OSV
added 2026/04/16 11:38 p.m.7 views

BIT-DJANGO-2026-4292 Privilege abuse in ModelAdmin.list_editable

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

2.7CVSS5.6AI score0.00294EPSS
SaveExploits0References4
Rows per page
Query Builder