tocsin

CVE-2015-8213

2 advisories.

PyPI/django CVE-2015-8213: low 2.8, EPSS 4.28%

Django settings leak in date template filter

Action: Upgrade django to 1.7.11 or later.

pip install django==1.7.11
pip install django==1.8.7
pip install django==1.9rc2

Affected

introducedfixedlast affected
1.71.7.11-
1.8a11.8.7-
1.9a11.9rc2-

Fixed versions

1.7.111.8.71.9rc2

Sources

CVE-2015-8213 · published · modified · JSON

PyPI/django CVE-2015-8213: unknown, EPSS 4.28%

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a

Action: Upgrade django to 1.7.11 or later.

pip install django==1.7.11
pip install django==1.8.7
pip install django==1.9rc2

Affected

introducedfixedlast affected
01.7.11-
1.81.8.7-
1.9a01.9rc2-

Fixed versions

1.7.111.8.71.9rc2

Sources

CVE-2015-8213 · published · modified · JSON