Skip to content

Product

debian/python-django vulnerabilities

252 published CVES affecting debian/python-django, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
252
Critical
13
High
54
Medium
91
Low
15
Unscored
79
CISA KEV
0

Latest debian/python-django CVEs

Newest publication first · page 11 of 11

  1. CVE-2007-0404 Django Arbitrary Code Execution

    Published
    HighCVSS 7.5 EPSS 1.7%

    bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file.

  2. CVE-2007-0405 Django Improper Access Control

    Published
    MediumCVSS 6.5 EPSS 1.3%

    The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.