CVE-2015-8213

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...

PT-2015-7744

Name of the Vulnerable Software and Affected Versions Django versions 1.7.x before 1.7.11 Django versions 1.8.x before 1.8.7 Django versions 1.9.x before 1.9rc2 Description The issue allows remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format...