Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/05/27 6:3 p.m.20 views

Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking

Impact Instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can secret access tokens across requests. This can allow users to access restricted querysets and restricted data. Patches The problem has been patched in version 8.4.1 and all following...

8.2CVSS6.7AI score0.00271EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder