Lucene search
RootSSV:61012HistorySep 14, 2013 - 12:00 a.m.
Django "ssi"模板标签目录遍历漏洞(CVE-2013-4315)
2013-09-1400:00:00
Root
www.seebug.org
10
0.005 Low
EPSS
Percentile
74.6%
BUGTRAQ ID: 62332
CVE(CAN) ID: CVE-2013-4315
Django是Python编程语言驱动的一个开源Web应用程序框架。
Django 1.4.7、1.5.3之前版本在处理"ssi"标签时没有在template/defaulttags.py内正确验证ALLOWED_INCLUDE_ROOTS设置，即用于读取文件，远程攻击者通过目录遍历序列利用此漏洞可获取敏感信息。
0
Django 1.5.x
Django 1.4.x
厂商补丁：
Django
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://www.djangoproject.com/
https://www.djangoproject.com/weblog/2013/sep/10/security-releases-issued/
Related
prion
prion
Directory traversal
2013-09-16 19:14:00
osv
osv
Django Directory Traversal via ssi template tag
2022-05-17 04:56:46
PYSEC-2013-20
2013-09-16 19:14:00
python-django - directory traversal
2013-09-11 00:00:00
nessus
nessus
FreeBSD : django -- multiple vulnerabilities (a851b305-1bc3-11e3-95b7-00e0814cab4e)
2013-09-13 00:00:00
Debian DSA-2755-1 : python-django - directory traversal
2013-09-12 00:00:00
Mandriva Linux Security Advisory : python-django (MDVSA-2013:234)
2013-09-14 00:00:00
seebug
seebug
Django 目录遍历序列(CVE-2013-4315)
2013-09-14 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2755-1)
2013-09-10 00:00:00
Debian Security Advisory DSA 2755-1 (python-django - directory traversal)
2013-09-11 00:00:00
Mageia: Security Advisory (MGASA-2013-0283)
2022-01-28 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2013-09-10 00:00:00
cvelist
cvelist
CVE-2013-4315
2013-09-16 19:00:00
gitlab
gitlab
Directory traversal with ssi template tag
2013-09-16 00:00:00
veracode
veracode
Directory Traversal
2019-01-15 09:01:36
cve
cve
CVE-2013-4315
2013-09-16 19:14:00
ubuntucve
ubuntucve
CVE-2013-4315
2013-09-16 00:00:00
debian
debian
[SECURITY] [DSA 2755-1] python-django security update
2013-09-11 14:24:55
[SECURITY] [DSA 2755-1] python-django security update
2013-09-11 14:25:20
debiancve
debiancve
CVE-2013-4315
2013-09-16 19:14:00
github
github
Django Directory Traversal via ssi template tag
2022-05-17 04:56:46
mageia
mageia
Updated python-django package fixes security vulnerability
2013-09-19 13:41:40
Updated python-django package fixes multiple vulnerabilities
2013-09-19 13:45:04
fedora
fedora
[SECURITY] Fedora 19 Update: python-django-1.5.4-1.fc19
2013-09-24 22:56:43
[SECURITY] Fedora 20 Update: python-django14-1.4.8-1.fc20
2013-09-24 23:00:28
[SECURITY] Fedora 19 Update: python-django14-1.4.8-1.fc19
2013-09-24 23:05:13
redhat
redhat
(RHSA-2013:1521) Moderate: python-django security update
2013-11-14 00:00:00
securityvulns
securityvulns
[USN-1967-1] Django vulnerabilities
2013-10-02 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2013-09-24 00:00:00