CVE-2016-9013

2 advisories.

PyPI/django CVE-2016-9013: critical 9.8

Django user with hardcoded password created when running tests on Oracle

Action: Upgrade django to 1.8.16 or later.

pip install django==1.10.3

pip install django==1.9.11

pip install django==1.8.16

Affected

introduced	fixed	last affected
1.10a1	1.10.3	-
1.9a1	1.9.11	-
1.8a1	1.8.16	-

Fixed versions

1.10.3

1.9.11

1.8.16

Sources

CVE-2016-9013 · published 2022-05-17T00:27:18Z · modified 2024-09-18T16:08:25.217294Z · JSON

PyPI/django CVE-2016-9013: unknown

Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easi