Lucene search
+L

1 matches found

OSV
OSV
added 2025/05/27 6:3 p.m.8 views

GHSA-WJRH-HJ83-3WH7 Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking

Impact Instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can secret access tokens across requests. This can allow users to access restricted querysets and restricted data. Patches The problem has been patched in version 8.4.1 and all following...

8.2CVSS6.9AI score0.00271EPSS
SaveExploits0References4
Rows per page
Query Builder