Lucene search
UbuntuUSN-2816-1HistoryNov 24, 2015 - 12:00 a.m.
Django vulnerability
2015-11-2400:00:00
ubuntu.com
28
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.5%
Releases
- Ubuntu 15.10
- Ubuntu 15.04
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- python-django - High-level Python web development framework
Details
Ryan Butterfield discovered that Django incorrectly handled the date
template filter. A remote attacker could possibly use this issue to obtain
secrets from application settings.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 15.10 | noarch | python-django | < 1.7.9-1ubuntu5.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | python-django-common | < 1.7.9-1ubuntu5.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | python-django-doc | < 1.7.9-1ubuntu5.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | python3-django | < 1.7.9-1ubuntu5.1 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python-django | < 1.7.6-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python-django-common | < 1.7.6-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python-django-doc | < 1.7.6-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python3-django | < 1.7.6-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-django | < 1.6.1-2ubuntu0.11 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-django-doc | < 1.6.1-2ubuntu0.11 | UNKNOWN |
References
Related
veracode
veracode
Information Disclosure Through Date Template Filter
2019-01-15 09:10:00
archlinux
archlinux
python-django, python2-django: information leakage
2015-12-05 00:00:00
redhat
redhat
(RHSA-2016:0129) Moderate: python-django security update
2016-02-08 06:43:05
(RHSA-2016:0157) Moderate: python-django security update
2016-02-10 01:06:18
(RHSA-2016:0156) Moderate: python-django security update
2016-02-10 01:06:15
nessus
nessus
Ubuntu 14.04 LTS : Django vulnerability (USN-2816-1)
2015-11-25 00:00:00
Debian DLA-349-1 : python-django security update
2015-11-30 00:00:00
debian
debian
[SECURITY] [DSA 3404-1] python-django security update
2015-11-25 17:32:31
[SECURITY] [DLA 349-1] python-django security update
2015-11-25 21:40:45
[SECURITY] [DSA 3404-1] python-django security update
2015-11-25 17:32:31
openvas
openvas
Debian Security Advisory DSA 3404-1 (python-django - security update)
2015-11-25 00:00:00
Debian: Security Advisory (DLA-349-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-2816-1)
2015-11-25 00:00:00
freebsd
freebsd
django -- information leak vulnerability
2015-11-24 00:00:00
altlinux
altlinux
gitlab
gitlab
Settings leak in date template filter
2015-12-07 00:00:00
debiancve
debiancve
CVE-2015-8213
2015-12-07 20:59:00
osv
osv
Django settings leak in date template filter
2022-05-17 03:25:24
PYSEC-2015-11
2015-12-07 20:59:00
github
github
Django settings leak in date template filter
2022-05-17 03:25:24
mageia
mageia
Updated python-django packages fix security vulnerability
2015-12-05 02:31:36
fedora
fedora
[SECURITY] Fedora 23 Update: python-django-1.8.7-1.fc23
2015-12-07 20:32:33
[SECURITY] Fedora 22 Update: python-django-1.8.7-1.fc22
2015-12-31 01:53:36
prion
prion
Format string
2015-12-07 20:59:00
ubuntucve
ubuntucve
CVE-2015-8213
2015-11-24 00:00:00
cve
cve
CVE-2015-8213
2015-12-07 20:59:00
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.5%
Related for USN-2816-1