CVE-2014-0483

2 advisories.

PyPI/django CVE-2014-0483: medium 5.3

Django data leakage via querystring manipulation in admin

Action: Upgrade django to 1.4.14 or later.

pip install django==1.4.14

pip install django==1.5.9

pip install django==1.6.6

pip install django==1.7c3

Affected

introduced	fixed	last affected
0	1.4.14	-
1.5	1.5.9	-
1.6	1.6.6	-
1.7a1	1.7c3	-

Fixed versions

1.4.14

1.5.9

1.6.6

1.7c3

Sources

CVE-2014-0483 · published 2022-05-14T02:09:22Z · modified 2024-09-18T16:24:53.895090Z · JSON

PyPI/django CVE-2014-0483: unknown

The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship bet