2 matches found
Debian DLA-206-1 : python-django-markupfield security update
James P. Turk discovered that the ReST renderer in django-markupfield, a custom Django field for easy use of markup in text fields, didn't disable the ..raw directive, allowing remote attackers to include arbitrary files. NOTE: Tenable Network Security has extracted the preceding description bloc...
5CVSS5.5AI score0.01794EPSS
SaveExploits0References2
20