Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/django@1.2.5
Typepypi
Namespace
Namedjango
Version1.2.5
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.2.30
Latest_non_vulnerable_version6.0.6
Affected_by_vulnerabilities
0
url VCID-29qk-rv5n-efbm
vulnerability_id VCID-29qk-rv5n-efbm
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-36359
reference_id
reference_type
scores
0
value 0.0113
scoring_system epss
scoring_elements 0.78658
published_at 2026-06-04T12:55:00Z
1
value 0.0113
scoring_system epss
scoring_elements 0.78685
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-36359
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22818
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22818
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23833
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23833
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28346
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28346
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28347
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28347
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34265
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34265
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36359
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36359
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41323
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41323
8
reference_url https://docs.djangoproject.com/en/4.0/releases/security
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/4.0/releases/security
9
reference_url https://docs.djangoproject.com/en/4.0/releases/security/
reference_id
reference_type
scores
url https://docs.djangoproject.com/en/4.0/releases/security/
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://github.com/advisories/GHSA-8x94-hmjh-97hq
reference_id
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8x94-hmjh-97hq
12
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
13
reference_url https://github.com/django/django/commit/b3e4494d759202a3b6bf247fd34455bf13be5b80
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/b3e4494d759202a3b6bf247fd34455bf13be5b80
14
reference_url https://github.com/django/django/commit/b7d9529cbe0af4adabb6ea5d01ed8dcce3668fb3
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/b7d9529cbe0af4adabb6ea5d01ed8dcce3668fb3
15
reference_url https://github.com/django/django/commit/bd062445cffd3f6cc6dcd20d13e2abed818fa173
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/bd062445cffd3f6cc6dcd20d13e2abed818fa173
16
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2022-245.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2022-245.yaml
17
reference_url https://groups.google.com/g/django-announce/c/8cz--gvaJr4
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://groups.google.com/g/django-announce/c/8cz--gvaJr4
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-36359
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-36359
21
reference_url https://security.netapp.com/advisory/ntap-20220915-0008
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20220915-0008
22
reference_url https://www.debian.org/security/2022/dsa-5254
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2022/dsa-5254
23
reference_url https://www.djangoproject.com/weblog/2022/aug/03/security-releases
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2022/aug/03/security-releases
24
reference_url https://www.djangoproject.com/weblog/2022/aug/03/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2022/aug/03/security-releases/
25
reference_url http://www.openwall.com/lists/oss-security/2022/08/03/1
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2022/08/03/1
26
reference_url https://security.archlinux.org/AVG-2810
reference_id AVG-2810
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2810
27
reference_url https://security.gentoo.org/glsa/202509-03
reference_id GLSA-202509-03
reference_type
scores
url https://security.gentoo.org/glsa/202509-03
28
reference_url https://usn.ubuntu.com/5549-1/
reference_id USN-5549-1
reference_type
scores
url https://usn.ubuntu.com/5549-1/
fixed_packages
0
url pkg:pypi/django@3.2.15
purl pkg:pypi/django@3.2.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4tyd-97z5-z3ar
1
vulnerability VCID-4z4e-8ttu-tyd6
2
vulnerability VCID-am3f-c5ex-8ff2
3
vulnerability VCID-au8h-vj9k-pufv
4
vulnerability VCID-bb8b-hq41-s7a6
5
vulnerability VCID-f4a7-tcz5-byfj
6
vulnerability VCID-fsaw-3ta1-x3dw
7
vulnerability VCID-ga69-9y5g-77c3
8
vulnerability VCID-m1dr-sjmw-jfd2
9
vulnerability VCID-m33h-4p9q-63fb
10
vulnerability VCID-qgp1-4efd-6yg6
11
vulnerability VCID-whgc-pt2s-77ar
12
vulnerability VCID-ynt9-h6ww-h7e9
13
vulnerability VCID-yuda-1mur-8bbq
14
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2.15
1
url pkg:pypi/django@4.0.7
purl pkg:pypi/django@4.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4tyd-97z5-z3ar
1
vulnerability VCID-4z4e-8ttu-tyd6
2
vulnerability VCID-au8h-vj9k-pufv
3
vulnerability VCID-bb8b-hq41-s7a6
4
vulnerability VCID-f4a7-tcz5-byfj
5
vulnerability VCID-ga69-9y5g-77c3
6
vulnerability VCID-m1dr-sjmw-jfd2
7
vulnerability VCID-whgc-pt2s-77ar
8
vulnerability VCID-ynt9-h6ww-h7e9
9
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.0.7
aliases BIT-django-2022-36359, CVE-2022-36359, GHSA-8x94-hmjh-97hq, PYSEC-2022-245
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-29qk-rv5n-efbm
1
url VCID-38e1-hepp-vkg9
vulnerability_id VCID-38e1-hepp-vkg9
summary The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service (resource consumption) via a URL associated with (1) a slow response, (2) a completed TCP connection with no application data sent, or (3) a large amount of application data, a related issue to CVE-2011-1521.
references
0
reference_url http://openwall.com/lists/oss-security/2011/09/11/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/11/1
1
reference_url http://openwall.com/lists/oss-security/2011/09/13/2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/13/2
2
reference_url http://openwall.com/lists/oss-security/2011/09/15/5
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/15/5
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-4137
reference_id
reference_type
scores
0
value 0.0188
scoring_system epss
scoring_elements 0.83496
published_at 2026-06-04T12:55:00Z
1
value 0.0188
scoring_system epss
scoring_elements 0.8352
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-4137
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=737366
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=737366
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4137
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4137
6
reference_url http://secunia.com/advisories/46614
reference_id
reference_type
scores
url http://secunia.com/advisories/46614
7
reference_url https://github.com/advisories/GHSA-3jqw-crqj-w8qw
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-3jqw-crqj-w8qw
8
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
9
reference_url https://github.com/django/django/commit/1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0
10
reference_url https://github.com/django/django/commit/7268f8af86186518821d775c530d5558fd726930
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/7268f8af86186518821d775c530d5558fd726930
11
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-2.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-2.yaml
12
reference_url https://hermes.opensuse.org/messages/14700881
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://hermes.opensuse.org/messages/14700881
13
reference_url https://www.djangoproject.com/weblog/2011/sep/09
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/09
14
reference_url https://www.djangoproject.com/weblog/2011/sep/09/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/09/
15
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/10/127
16
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/10/127/
17
reference_url http://www.debian.org/security/2011/dsa-2332
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2011/dsa-2332
18
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
reference_id 641405
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-4137
reference_id CVE-2011-4137
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-4137
20
reference_url https://usn.ubuntu.com/1297-1/
reference_id USN-1297-1
reference_type
scores
url https://usn.ubuntu.com/1297-1/
fixed_packages
0
url pkg:pypi/django@1.2.7
purl pkg:pypi/django@1.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-7g7m-bfe1-wkhd
9
vulnerability VCID-7rz2-nqdn-hycc
10
vulnerability VCID-8gus-er59-1qak
11
vulnerability VCID-8v2c-7739-2ugp
12
vulnerability VCID-912q-3eks-4yfm
13
vulnerability VCID-9bsf-vm3b-ubhw
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ffsr-th58-p3ct
19
vulnerability VCID-ga69-9y5g-77c3
20
vulnerability VCID-jfya-694v-myar
21
vulnerability VCID-ksh8-pazn-dbca
22
vulnerability VCID-mccp-khb9-qkb7
23
vulnerability VCID-r7tk-79xy-jkhj
24
vulnerability VCID-rq19-9v21-47dy
25
vulnerability VCID-rxxr-sseq-k7a9
26
vulnerability VCID-ta66-7qrm-sbhu
27
vulnerability VCID-u4a7-uvcb-9kf8
28
vulnerability VCID-u6sd-648r-qbdb
29
vulnerability VCID-vdpf-jddk-syda
30
vulnerability VCID-vj5u-2ukv-audq
31
vulnerability VCID-weqb-fxu4-17e7
32
vulnerability VCID-whgc-pt2s-77ar
33
vulnerability VCID-xf2n-qua7-m7fb
34
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.7
1
url pkg:pypi/django@1.3.1
purl pkg:pypi/django@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-j7jf-zzvz-skgm
24
vulnerability VCID-jfya-694v-myar
25
vulnerability VCID-ksh8-pazn-dbca
26
vulnerability VCID-mccp-khb9-qkb7
27
vulnerability VCID-qu99-yudm-57fp
28
vulnerability VCID-r7tk-79xy-jkhj
29
vulnerability VCID-rq19-9v21-47dy
30
vulnerability VCID-rxxr-sseq-k7a9
31
vulnerability VCID-ta66-7qrm-sbhu
32
vulnerability VCID-u4a7-uvcb-9kf8
33
vulnerability VCID-u6sd-648r-qbdb
34
vulnerability VCID-vdpf-jddk-syda
35
vulnerability VCID-vj5u-2ukv-audq
36
vulnerability VCID-weqb-fxu4-17e7
37
vulnerability VCID-whgc-pt2s-77ar
38
vulnerability VCID-xf2n-qua7-m7fb
39
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.1
aliases CVE-2011-4137, GHSA-3jqw-crqj-w8qw, PYSEC-2011-2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-38e1-hepp-vkg9
2
url VCID-3kza-a88p-kfg7
vulnerability_id VCID-3kza-a88p-kfg7
summary Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors involving unsafe usage of Element.innerHTML.
references
0
reference_url http://packetstormsecurity.com/files/137965/Django-3.3.0-Script-Insertion.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/137965/Django-3.3.0-Script-Insertion.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2016-1594.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-1594.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2016-1595.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-1595.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2016-1596.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-1596.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6186.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6186.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6186
reference_id
reference_type
scores
0
value 0.16367
scoring_system epss
scoring_elements 0.9499
published_at 2026-06-05T12:55:00Z
1
value 0.16367
scoring_system epss
scoring_elements 0.94982
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6186
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6186
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6186
7
reference_url http://seclists.org/fulldisclosure/2016/Jul/53
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2016/Jul/53
8
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
9
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
10
reference_url https://github.com/django/django/commit/6fa150b2f8b601668083042324c4add534143cb1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/6fa150b2f8b601668083042324c4add534143cb1
11
reference_url https://github.com/django/django/commit/d03bf6fe4e9bf5b07de62c1a271c4b41a7d3d158
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/d03bf6fe4e9bf5b07de62c1a271c4b41a7d3d158
12
reference_url https://github.com/django/django/commit/f68e5a99164867ab0e071a936470958ed867479d
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/f68e5a99164867ab0e071a936470958ed867479d
13
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-2.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-2.yaml
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DMLLFAUT4J4IP4P2KI4NOVWRMHA22WUJ
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DMLLFAUT4J4IP4P2KI4NOVWRMHA22WUJ
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DMLLFAUT4J4IP4P2KI4NOVWRMHA22WUJ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DMLLFAUT4J4IP4P2KI4NOVWRMHA22WUJ/
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KHHPN6MISX5I6UTXQHYLPTLEEUE6WDXW
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KHHPN6MISX5I6UTXQHYLPTLEEUE6WDXW
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KHHPN6MISX5I6UTXQHYLPTLEEUE6WDXW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KHHPN6MISX5I6UTXQHYLPTLEEUE6WDXW/
18
reference_url https://web.archive.org/web/20201022155237/http://www.securityfocus.com/archive/1/538947/100/0/threaded
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201022155237/http://www.securityfocus.com/archive/1/538947/100/0/threaded
19
reference_url https://web.archive.org/web/20210123154652/http://www.securityfocus.com/bid/92058
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210123154652/http://www.securityfocus.com/bid/92058
20
reference_url https://web.archive.org/web/20211204042848/http://www.securitytracker.com/id/1036338
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20211204042848/http://www.securitytracker.com/id/1036338
21
reference_url https://www.djangoproject.com/weblog/2016/jul/18/security-releases
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2016/jul/18/security-releases
22
reference_url https://www.djangoproject.com/weblog/2016/jul/18/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2016/jul/18/security-releases/
23
reference_url https://www.exploit-db.com/exploits/40129
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/40129
24
reference_url https://www.exploit-db.com/exploits/40129/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/40129/
25
reference_url http://www.debian.org/security/2016/dsa-3622
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3622
26
reference_url http://www.securityfocus.com/archive/1/538947/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/538947/100/0/threaded
27
reference_url http://www.securityfocus.com/bid/92058
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/92058
28
reference_url http://www.securitytracker.com/id/1036338
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1036338
29
reference_url http://www.ubuntu.com/usn/USN-3039-1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-3039-1
30
reference_url http://www.vulnerability-lab.com/get_content.php?id=1869
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vulnerability-lab.com/get_content.php?id=1869
31
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1355663
reference_id 1355663
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1355663
32
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831799
reference_id 831799
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831799
33
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/webapps/40129.txt
reference_id CVE-2016-6186
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/webapps/40129.txt
34
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6186
reference_id CVE-2016-6186
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-6186
35
reference_url https://www.vulnerability-lab.com/get_content.php?id=1869
reference_id CVE-2016-6186
reference_type exploit
scores
url https://www.vulnerability-lab.com/get_content.php?id=1869
36
reference_url https://github.com/advisories/GHSA-c8c8-9472-w52h
reference_id GHSA-c8c8-9472-w52h
reference_type
scores
url https://github.com/advisories/GHSA-c8c8-9472-w52h
37
reference_url https://access.redhat.com/errata/RHSA-2016:1594
reference_id RHSA-2016:1594
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1594
38
reference_url https://access.redhat.com/errata/RHSA-2016:1595
reference_id RHSA-2016:1595
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1595
39
reference_url https://access.redhat.com/errata/RHSA-2016:1596
reference_id RHSA-2016:1596
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1596
40
reference_url https://usn.ubuntu.com/3039-1/
reference_id USN-3039-1
reference_type
scores
url https://usn.ubuntu.com/3039-1/
fixed_packages
0
url pkg:pypi/django@1.8.14
purl pkg:pypi/django@1.8.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-6w99-8w84-jkh9
4
vulnerability VCID-8gus-er59-1qak
5
vulnerability VCID-9mpt-zxaw-kkeg
6
vulnerability VCID-bb8b-hq41-s7a6
7
vulnerability VCID-c58g-7jpv-t7hc
8
vulnerability VCID-ga69-9y5g-77c3
9
vulnerability VCID-qy2a-mvpz-q7eh
10
vulnerability VCID-rruq-9scz-vbg8
11
vulnerability VCID-upbz-vg19-rugv
12
vulnerability VCID-vdpf-jddk-syda
13
vulnerability VCID-weqb-fxu4-17e7
14
vulnerability VCID-whgc-pt2s-77ar
15
vulnerability VCID-x61x-6b6k-h3bn
16
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.14
1
url pkg:pypi/django@1.9.8
purl pkg:pypi/django@1.9.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-6w99-8w84-jkh9
4
vulnerability VCID-8gus-er59-1qak
5
vulnerability VCID-9mpt-zxaw-kkeg
6
vulnerability VCID-bb8b-hq41-s7a6
7
vulnerability VCID-ga69-9y5g-77c3
8
vulnerability VCID-qy2a-mvpz-q7eh
9
vulnerability VCID-rruq-9scz-vbg8
10
vulnerability VCID-upbz-vg19-rugv
11
vulnerability VCID-vdpf-jddk-syda
12
vulnerability VCID-weqb-fxu4-17e7
13
vulnerability VCID-whgc-pt2s-77ar
14
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.8
2
url pkg:pypi/django@1.10rc1
purl pkg:pypi/django@1.10rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-6w99-8w84-jkh9
4
vulnerability VCID-8gus-er59-1qak
5
vulnerability VCID-9mpt-zxaw-kkeg
6
vulnerability VCID-bb8b-hq41-s7a6
7
vulnerability VCID-ga69-9y5g-77c3
8
vulnerability VCID-hpj4-a9fa-4bca
9
vulnerability VCID-qy2a-mvpz-q7eh
10
vulnerability VCID-rruq-9scz-vbg8
11
vulnerability VCID-vdpf-jddk-syda
12
vulnerability VCID-whgc-pt2s-77ar
13
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10rc1
aliases CVE-2016-6186, GHSA-c8c8-9472-w52h, PYSEC-2016-2
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3kza-a88p-kfg7
3
url VCID-3sg7-t77d-rkc6
vulnerability_id VCID-3sg7-t77d-rkc6
summary The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2014-0456.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0456.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2014-0457.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0457.html
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0473.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0473.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0473
reference_id
reference_type
scores
0
value 0.00298
scoring_system epss
scoring_elements 0.53431
published_at 2026-06-04T12:55:00Z
1
value 0.00298
scoring_system epss
scoring_elements 0.5349
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0473
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730
10
reference_url http://secunia.com/advisories/61281
reference_id
reference_type
scores
url http://secunia.com/advisories/61281
11
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
12
reference_url https://github.com/django/django/commit/1170f285ddd6a94a65f911a27788ba49ca08c0b0
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/1170f285ddd6a94a65f911a27788ba49ca08c0b0
13
reference_url https://github.com/django/django/commit/6872f42757d7ef6a97e0b6ec5db4d2615d8a2bd8
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/6872f42757d7ef6a97e0b6ec5db4d2615d8a2bd8
14
reference_url https://github.com/django/django/commit/d63e20942f3024f24cb8cd85a49461ba8a9b6736
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/d63e20942f3024f24cb8cd85a49461ba8a9b6736
15
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-2.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-2.yaml
16
reference_url https://www.djangoproject.com/weblog/2014/apr/21/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2014/apr/21/security
17
reference_url https://www.djangoproject.com/weblog/2014/apr/21/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2014/apr/21/security/
18
reference_url http://www.debian.org/security/2014/dsa-2934
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2014/dsa-2934
19
reference_url http://www.ubuntu.com/usn/USN-2169-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2169-1
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1090592
reference_id 1090592
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1090592
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0473
reference_id CVE-2014-0473
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0473
22
reference_url https://github.com/advisories/GHSA-89hj-xfx5-7q66
reference_id GHSA-89hj-xfx5-7q66
reference_type
scores
url https://github.com/advisories/GHSA-89hj-xfx5-7q66
23
reference_url https://security.gentoo.org/glsa/201406-26
reference_id GLSA-201406-26
reference_type
scores
url https://security.gentoo.org/glsa/201406-26
24
reference_url https://access.redhat.com/errata/RHSA-2014:0456
reference_id RHSA-2014:0456
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0456
25
reference_url https://access.redhat.com/errata/RHSA-2014:0457
reference_id RHSA-2014:0457
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0457
26
reference_url https://usn.ubuntu.com/2169-1/
reference_id USN-2169-1
reference_type
scores
url https://usn.ubuntu.com/2169-1/
fixed_packages
0
url pkg:pypi/django@1.4.11
purl pkg:pypi/django@1.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-71t1-69yq-c7h6
9
vulnerability VCID-7rz2-nqdn-hycc
10
vulnerability VCID-8gus-er59-1qak
11
vulnerability VCID-8v2c-7739-2ugp
12
vulnerability VCID-912q-3eks-4yfm
13
vulnerability VCID-9bqp-b6rw-mye7
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ga69-9y5g-77c3
19
vulnerability VCID-jfya-694v-myar
20
vulnerability VCID-kq8u-td31-uqaa
21
vulnerability VCID-ksh8-pazn-dbca
22
vulnerability VCID-mccp-khb9-qkb7
23
vulnerability VCID-r7tk-79xy-jkhj
24
vulnerability VCID-rxxr-sseq-k7a9
25
vulnerability VCID-ta66-7qrm-sbhu
26
vulnerability VCID-th75-ys47-d3h8
27
vulnerability VCID-u4a7-uvcb-9kf8
28
vulnerability VCID-u6sd-648r-qbdb
29
vulnerability VCID-vdpf-jddk-syda
30
vulnerability VCID-weqb-fxu4-17e7
31
vulnerability VCID-whgc-pt2s-77ar
32
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.11
1
url pkg:pypi/django@1.5.6
purl pkg:pypi/django@1.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-71t1-69yq-c7h6
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bqp-b6rw-mye7
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-bb8b-hq41-s7a6
16
vulnerability VCID-dh12-js4b-h7fw
17
vulnerability VCID-ga69-9y5g-77c3
18
vulnerability VCID-jfya-694v-myar
19
vulnerability VCID-ksh8-pazn-dbca
20
vulnerability VCID-mccp-khb9-qkb7
21
vulnerability VCID-r7tk-79xy-jkhj
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u6sd-648r-qbdb
26
vulnerability VCID-vdpf-jddk-syda
27
vulnerability VCID-weqb-fxu4-17e7
28
vulnerability VCID-whgc-pt2s-77ar
29
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.6
2
url pkg:pypi/django@1.6.3
purl pkg:pypi/django@1.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-71t1-69yq-c7h6
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bqp-b6rw-mye7
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-bb8b-hq41-s7a6
16
vulnerability VCID-dh12-js4b-h7fw
17
vulnerability VCID-ga69-9y5g-77c3
18
vulnerability VCID-jfya-694v-myar
19
vulnerability VCID-ksh8-pazn-dbca
20
vulnerability VCID-mccp-khb9-qkb7
21
vulnerability VCID-r7tk-79xy-jkhj
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u6sd-648r-qbdb
26
vulnerability VCID-vacy-878s-3kfb
27
vulnerability VCID-vdpf-jddk-syda
28
vulnerability VCID-weqb-fxu4-17e7
29
vulnerability VCID-whgc-pt2s-77ar
30
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.3
aliases CVE-2014-0473, GHSA-89hj-xfx5-7q66, PYSEC-2014-2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3sg7-t77d-rkc6
4
url VCID-4tyd-97z5-z3ar
vulnerability_id VCID-4tyd-97z5-z3ar
summary 
Django allows enumeration of user e-mail addresses
An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45231.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45231.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45231
reference_id
reference_type
scores
0
value 0.00235
scoring_system epss
scoring_elements 0.46551
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45231
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14232
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14232
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41164
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41164
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43665
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43665
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24680
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24680
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27351
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27351
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39329
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39329
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39330
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39614
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39614
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41989
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41989
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41991
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41991
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42005
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45231
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53907
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53907
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56374
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56374
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13372
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26699
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26699
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32873
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32873
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48432
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48432
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57833
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57833
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59681
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59681
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59682
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59682
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64459
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64459
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64460
25
reference_url https://docs.djangoproject.com/en/dev/releases/security
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/dev/releases/security
26
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
27
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
28
reference_url https://github.com/django/django/commit/3c733c78d6f8e50296d6e248968b6516c92a53ca
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/3c733c78d6f8e50296d6e248968b6516c92a53ca
29
reference_url https://github.com/django/django/commit/96d84047715ea1715b4bd1594e46122b8a77b9e2
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/96d84047715ea1715b4bd1594e46122b8a77b9e2
30
reference_url https://github.com/django/django/commit/bf4888d317ba4506d091eeac6e8b4f1fcc731199
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/bf4888d317ba4506d091eeac6e8b4f1fcc731199
31
reference_url https://groups.google.com/forum/#%21forum/django-announce
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-30T16:35:34Z/
url https://groups.google.com/forum/#%21forum/django-announce
32
reference_url https://www.djangoproject.com/weblog/2024/sep/03/security-releases
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2024/sep/03/security-releases
33
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2314496
reference_id 2314496
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2314496
34
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45231
reference_id CVE-2024-45231
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45231
35
reference_url https://github.com/advisories/GHSA-rrqc-c2jx-6jgv
reference_id GHSA-rrqc-c2jx-6jgv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rrqc-c2jx-6jgv
36
reference_url https://security.gentoo.org/glsa/202509-03
reference_id GLSA-202509-03
reference_type
scores
url https://security.gentoo.org/glsa/202509-03
37
reference_url https://usn.ubuntu.com/6987-1/
reference_id USN-6987-1
reference_type
scores
url https://usn.ubuntu.com/6987-1/
fixed_packages
0
url pkg:pypi/django@4.2.16
purl pkg:pypi/django@4.2.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ft7-rbey-kuhx
1
vulnerability VCID-4kcg-gx5y-cuaw
2
vulnerability VCID-5xtt-au84-zbb2
3
vulnerability VCID-7c5n-nzwk-v7bz
4
vulnerability VCID-7upw-5p86-8bfr
5
vulnerability VCID-9kvc-1bdz-n3bd
6
vulnerability VCID-bb8b-hq41-s7a6
7
vulnerability VCID-fcg9-xypn-ykhf
8
vulnerability VCID-ga69-9y5g-77c3
9
vulnerability VCID-ga7z-wj4j-63h1
10
vulnerability VCID-jybd-p65h-xffy
11
vulnerability VCID-kxdd-yzp3-r7cb
12
vulnerability VCID-n2v7-jqjy-37bc
13
vulnerability VCID-pa7y-gpwp-6qgj
14
vulnerability VCID-phkp-9abp-f3dq
15
vulnerability VCID-qy1a-x3ff-4bc8
16
vulnerability VCID-r1vx-vv7d-gqaj
17
vulnerability VCID-shch-yusm-1uck
18
vulnerability VCID-shjc-2j68-2yfy
19
vulnerability VCID-tktt-vg92-6kae
20
vulnerability VCID-tuqc-c251-h7ds
21
vulnerability VCID-ud73-4t2c-n3at
22
vulnerability VCID-w777-44ns-cybg
23
vulnerability VCID-wa3g-27sx-mbcw
24
vulnerability VCID-whgc-pt2s-77ar
25
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.16
1
url pkg:pypi/django@5.0.9
purl pkg:pypi/django@5.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ft7-rbey-kuhx
1
vulnerability VCID-bb8b-hq41-s7a6
2
vulnerability VCID-ga69-9y5g-77c3
3
vulnerability VCID-pa7y-gpwp-6qgj
4
vulnerability VCID-qw15-2kq7-wqed
5
vulnerability VCID-qy1a-x3ff-4bc8
6
vulnerability VCID-ud73-4t2c-n3at
7
vulnerability VCID-whgc-pt2s-77ar
8
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.9
2
url pkg:pypi/django@5.1.1
purl pkg:pypi/django@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ft7-rbey-kuhx
1
vulnerability VCID-5xtt-au84-zbb2
2
vulnerability VCID-7c5n-nzwk-v7bz
3
vulnerability VCID-9kvc-1bdz-n3bd
4
vulnerability VCID-bb8b-hq41-s7a6
5
vulnerability VCID-fcg9-xypn-ykhf
6
vulnerability VCID-ga69-9y5g-77c3
7
vulnerability VCID-n2v7-jqjy-37bc
8
vulnerability VCID-pa7y-gpwp-6qgj
9
vulnerability VCID-qw15-2kq7-wqed
10
vulnerability VCID-qy1a-x3ff-4bc8
11
vulnerability VCID-ud73-4t2c-n3at
12
vulnerability VCID-whgc-pt2s-77ar
13
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.1
aliases CVE-2024-45231, GHSA-rrqc-c2jx-6jgv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4tyd-97z5-z3ar
5
url VCID-5brz-383w-pfbb
vulnerability_id VCID-5brz-383w-pfbb
summary django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier.
references
0
reference_url http://openwall.com/lists/oss-security/2011/09/11/1
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/11/1
1
reference_url http://openwall.com/lists/oss-security/2011/09/13/2
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/13/2
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-4136
reference_id
reference_type
scores
0
value 0.01195
scoring_system epss
scoring_elements 0.79204
published_at 2026-06-04T12:55:00Z
1
value 0.01195
scoring_system epss
scoring_elements 0.7923
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-4136
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=737366
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=737366
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4136
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4136
5
reference_url http://secunia.com/advisories/46614
reference_id
reference_type
scores
url http://secunia.com/advisories/46614
6
reference_url https://github.com/advisories/GHSA-x88j-93vc-wpmp
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-x88j-93vc-wpmp
7
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
8
reference_url https://github.com/django/django/commit/ac7c3a110f906e4dfed3a17451bf7fd9fcb81296
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/ac7c3a110f906e4dfed3a17451bf7fd9fcb81296
9
reference_url https://github.com/django/django/commit/fbe2eead2fa9d808658ca582241bcacb02618840
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/fbe2eead2fa9d808658ca582241bcacb02618840
10
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-1.yaml
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-1.yaml
11
reference_url https://hermes.opensuse.org/messages/14700881
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://hermes.opensuse.org/messages/14700881
12
reference_url https://www.djangoproject.com/weblog/2011/sep/09
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/09
13
reference_url https://www.djangoproject.com/weblog/2011/sep/09/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/09/
14
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/10/127
15
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/10/127/
16
reference_url http://www.debian.org/security/2011/dsa-2332
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2011/dsa-2332
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
reference_id 641405
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-4136
reference_id CVE-2011-4136
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-4136
19
reference_url https://usn.ubuntu.com/1297-1/
reference_id USN-1297-1
reference_type
scores
url https://usn.ubuntu.com/1297-1/
fixed_packages
0
url pkg:pypi/django@1.2.7
purl pkg:pypi/django@1.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-7g7m-bfe1-wkhd
9
vulnerability VCID-7rz2-nqdn-hycc
10
vulnerability VCID-8gus-er59-1qak
11
vulnerability VCID-8v2c-7739-2ugp
12
vulnerability VCID-912q-3eks-4yfm
13
vulnerability VCID-9bsf-vm3b-ubhw
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ffsr-th58-p3ct
19
vulnerability VCID-ga69-9y5g-77c3
20
vulnerability VCID-jfya-694v-myar
21
vulnerability VCID-ksh8-pazn-dbca
22
vulnerability VCID-mccp-khb9-qkb7
23
vulnerability VCID-r7tk-79xy-jkhj
24
vulnerability VCID-rq19-9v21-47dy
25
vulnerability VCID-rxxr-sseq-k7a9
26
vulnerability VCID-ta66-7qrm-sbhu
27
vulnerability VCID-u4a7-uvcb-9kf8
28
vulnerability VCID-u6sd-648r-qbdb
29
vulnerability VCID-vdpf-jddk-syda
30
vulnerability VCID-vj5u-2ukv-audq
31
vulnerability VCID-weqb-fxu4-17e7
32
vulnerability VCID-whgc-pt2s-77ar
33
vulnerability VCID-xf2n-qua7-m7fb
34
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.7
1
url pkg:pypi/django@1.3.1
purl pkg:pypi/django@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-j7jf-zzvz-skgm
24
vulnerability VCID-jfya-694v-myar
25
vulnerability VCID-ksh8-pazn-dbca
26
vulnerability VCID-mccp-khb9-qkb7
27
vulnerability VCID-qu99-yudm-57fp
28
vulnerability VCID-r7tk-79xy-jkhj
29
vulnerability VCID-rq19-9v21-47dy
30
vulnerability VCID-rxxr-sseq-k7a9
31
vulnerability VCID-ta66-7qrm-sbhu
32
vulnerability VCID-u4a7-uvcb-9kf8
33
vulnerability VCID-u6sd-648r-qbdb
34
vulnerability VCID-vdpf-jddk-syda
35
vulnerability VCID-vj5u-2ukv-audq
36
vulnerability VCID-weqb-fxu4-17e7
37
vulnerability VCID-whgc-pt2s-77ar
38
vulnerability VCID-xf2n-qua7-m7fb
39
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.1
aliases CVE-2011-4136, GHSA-x88j-93vc-wpmp, PYSEC-2011-1
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5brz-383w-pfbb
6
url VCID-5q58-pzt4-8uey
vulnerability_id VCID-5q58-pzt4-8uey
summary Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitably crafted delimiter to a contrib.postgres.aggregates.StringAgg instance, it was possible to break escaping and inject malicious SQL.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7471.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7471.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-7471
reference_id
reference_type
scores
0
value 0.1537
scoring_system epss
scoring_elements 0.94763
published_at 2026-06-04T12:55:00Z
1
value 0.1537
scoring_system epss
scoring_elements 0.94772
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-7471
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7471
3
reference_url https://docs.djangoproject.com/en/3.0/releases/security
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/3.0/releases/security
4
reference_url https://docs.djangoproject.com/en/3.0/releases/security/
reference_id
reference_type
scores
url https://docs.djangoproject.com/en/3.0/releases/security/
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://github.com/advisories/GHSA-hmr4-m2h5-33qx
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-hmr4-m2h5-33qx
7
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
8
reference_url https://github.com/django/django/commit/001b0634cd309e372edb6d7d95d083d02b8e37bd
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/001b0634cd309e372edb6d7d95d083d02b8e37bd
9
reference_url https://github.com/django/django/commit/505826b469b16ab36693360da9e11fd13213421b
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/505826b469b16ab36693360da9e11fd13213421b
10
reference_url https://github.com/django/django/commit/c67a368c16e4680b324b4f385398d638db4d8147
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/c67a368c16e4680b324b4f385398d638db4d8147
11
reference_url https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda973056136
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda973056136
12
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2020-35.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2020-35.yaml
13
reference_url https://groups.google.com/forum/#!topic/django-announce/X45S86X5bZI
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!topic/django-announce/X45S86X5bZI
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ/
16
reference_url https://seclists.org/bugtraq/2020/Feb/30
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2020/Feb/30
17
reference_url https://security.gentoo.org/glsa/202004-17
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202004-17
18
reference_url https://security.netapp.com/advisory/ntap-20200221-0006
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20200221-0006
19
reference_url https://security.netapp.com/advisory/ntap-20200221-0006/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20200221-0006/
20
reference_url https://usn.ubuntu.com/4264-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4264-1
21
reference_url https://usn.ubuntu.com/4264-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4264-1/
22
reference_url https://www.debian.org/security/2020/dsa-4629
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2020/dsa-4629
23
reference_url https://www.djangoproject.com/weblog/2020/feb/03/security-releases
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2020/feb/03/security-releases
24
reference_url https://www.djangoproject.com/weblog/2020/feb/03/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2020/feb/03/security-releases/
25
reference_url https://www.openwall.com/lists/oss-security/2020/02/03/1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.openwall.com/lists/oss-security/2020/02/03/1
26
reference_url http://www.openwall.com/lists/oss-security/2020/02/03/1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/02/03/1
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1798515
reference_id 1798515
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1798515
28
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=950581
reference_id 950581
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=950581
29
reference_url https://security.archlinux.org/ASA-202002-1
reference_id ASA-202002-1
reference_type
scores
url https://security.archlinux.org/ASA-202002-1
30
reference_url https://security.archlinux.org/AVG-1091
reference_id AVG-1091
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1091
31
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-7471
reference_id CVE-2020-7471
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-7471
fixed_packages
0
url pkg:pypi/django@1.11.28
purl pkg:pypi/django@1.11.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-9mpt-zxaw-kkeg
3
vulnerability VCID-bb8b-hq41-s7a6
4
vulnerability VCID-ga69-9y5g-77c3
5
vulnerability VCID-m4wa-xv9b-q7ce
6
vulnerability VCID-whgc-pt2s-77ar
7
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.28
1
url pkg:pypi/django@2.2.10
purl pkg:pypi/django@2.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4cp2-k4mn-8ffj
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-51tx-4tp9-kbcz
4
vulnerability VCID-6jpg-yrf8-cufy
5
vulnerability VCID-9end-mq19-rke5
6
vulnerability VCID-9mpt-zxaw-kkeg
7
vulnerability VCID-attf-6gj8-ebaj
8
vulnerability VCID-bb8b-hq41-s7a6
9
vulnerability VCID-drwp-htkk-bkfh
10
vulnerability VCID-fhp8-tck4-mye4
11
vulnerability VCID-fksk-pr23-2yd8
12
vulnerability VCID-ga69-9y5g-77c3
13
vulnerability VCID-hh9b-52xn-z7a9
14
vulnerability VCID-j81e-su1y-tqa6
15
vulnerability VCID-m4wa-xv9b-q7ce
16
vulnerability VCID-n9vn-4uxr-hkau
17
vulnerability VCID-na9w-xkvx-cbhd
18
vulnerability VCID-nss9-1yrb-x7f2
19
vulnerability VCID-q8r2-m9s6-rbek
20
vulnerability VCID-qvfs-2v1h-p3h4
21
vulnerability VCID-u9q1-63gf-7feh
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-wnxx-rc7w-cke4
24
vulnerability VCID-ynt9-h6ww-h7e9
25
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.2.10
2
url pkg:pypi/django@3.0.3
purl pkg:pypi/django@3.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4cp2-k4mn-8ffj
2
vulnerability VCID-4pb2-tqru-uufs
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-9mpt-zxaw-kkeg
5
vulnerability VCID-bb8b-hq41-s7a6
6
vulnerability VCID-fhp8-tck4-mye4
7
vulnerability VCID-ga69-9y5g-77c3
8
vulnerability VCID-hh9b-52xn-z7a9
9
vulnerability VCID-j81e-su1y-tqa6
10
vulnerability VCID-m4wa-xv9b-q7ce
11
vulnerability VCID-n9vn-4uxr-hkau
12
vulnerability VCID-na9w-xkvx-cbhd
13
vulnerability VCID-q8r2-m9s6-rbek
14
vulnerability VCID-qvfs-2v1h-p3h4
15
vulnerability VCID-whgc-pt2s-77ar
16
vulnerability VCID-wnxx-rc7w-cke4
17
vulnerability VCID-ynt9-h6ww-h7e9
18
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.0.3
aliases BIT-django-2020-7471, CVE-2020-7471, GHSA-hmr4-m2h5-33qx, PYSEC-2020-35
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5q58-pzt4-8uey
7
url VCID-5vmb-d4xp-zfgy
vulnerability_id VCID-5vmb-d4xp-zfgy
summary Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X-Auth_User header.
references
0
reference_url http://advisories.mageia.org/MGASA-2015-0026.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://advisories.mageia.org/MGASA-2015-0026.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html
3
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
5
reference_url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0219.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0219.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-0219
reference_id
reference_type
scores
0
value 0.04836
scoring_system epss
scoring_elements 0.89703
published_at 2026-06-04T12:55:00Z
1
value 0.04836
scoring_system epss
scoring_elements 0.8972
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-0219
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0219
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0219
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0220
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0220
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0221
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0221
11
reference_url http://secunia.com/advisories/62285
reference_id
reference_type
scores
url http://secunia.com/advisories/62285
12
reference_url http://secunia.com/advisories/62309
reference_id
reference_type
scores
url http://secunia.com/advisories/62309
13
reference_url http://secunia.com/advisories/62718
reference_id
reference_type
scores
url http://secunia.com/advisories/62718
14
reference_url https://github.com/django/daphne/blob/e49c39a4e5fac8ec170dd653641a9e90844fd3f1/daphne/http_protocol.py#L151
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/daphne/blob/e49c39a4e5fac8ec170dd653641a9e90844fd3f1/daphne/http_protocol.py#L151
15
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
16
reference_url https://github.com/django/django/commit/41b4bc73ee0da7b2e09f4af47fc1fd21144c710f
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/41b4bc73ee0da7b2e09f4af47fc1fd21144c710f
17
reference_url https://github.com/django/django/commit/4f6fffc1dc429f1ad428ecf8e6620739e8837450
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/4f6fffc1dc429f1ad428ecf8e6620739e8837450
18
reference_url https://github.com/django/django/commit/d7597b31d5c03106eeba4be14a33b32a5e25f4ee
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/d7597b31d5c03106eeba4be14a33b32a5e25f4ee
19
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-4.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-4.yaml
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-0219
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-0219
21
reference_url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62285
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62285
22
reference_url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62309
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62309
23
reference_url https://web.archive.org/web/20150523054951/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:109/?name=MDVSA-2015:109
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150523054951/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:109/?name=MDVSA-2015:109
24
reference_url https://web.archive.org/web/20150523054953/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:036/?name=MDVSA-2015:036
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150523054953/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:036/?name=MDVSA-2015:036
25
reference_url https://web.archive.org/web/20151104201446/http://secunia.com/advisories/62718
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20151104201446/http://secunia.com/advisories/62718
26
reference_url https://www.djangoproject.com/weblog/2015/jan/13/security
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2015/jan/13/security
27
reference_url https://www.djangoproject.com/weblog/2015/jan/13/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/jan/13/security/
28
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:036
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:036
29
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
30
reference_url http://www.ubuntu.com/usn/USN-2469-1
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2469-1
31
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1179672
reference_id 1179672
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1179672
32
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775375
reference_id 775375
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775375
33
reference_url https://github.com/advisories/GHSA-7qfw-j7hp-v45g
reference_id GHSA-7qfw-j7hp-v45g
reference_type
scores
url https://github.com/advisories/GHSA-7qfw-j7hp-v45g
34
reference_url https://usn.ubuntu.com/2469-1/
reference_id USN-2469-1
reference_type
scores
url https://usn.ubuntu.com/2469-1/
fixed_packages
0
url pkg:pypi/django@1.4.18
purl pkg:pypi/django@1.4.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-jfya-694v-myar
13
vulnerability VCID-kq8u-td31-uqaa
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-th75-ys47-d3h8
18
vulnerability VCID-u6sd-648r-qbdb
19
vulnerability VCID-vdpf-jddk-syda
20
vulnerability VCID-weqb-fxu4-17e7
21
vulnerability VCID-whgc-pt2s-77ar
22
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.18
1
url pkg:pypi/django@1.6.10
purl pkg:pypi/django@1.6.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-6wah-r8vr-5qc4
6
vulnerability VCID-8gus-er59-1qak
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-bahz-gfxv-e3b2
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-jfya-694v-myar
12
vulnerability VCID-ksh8-pazn-dbca
13
vulnerability VCID-mccp-khb9-qkb7
14
vulnerability VCID-rxxr-sseq-k7a9
15
vulnerability VCID-u6sd-648r-qbdb
16
vulnerability VCID-vacy-878s-3kfb
17
vulnerability VCID-vdpf-jddk-syda
18
vulnerability VCID-weqb-fxu4-17e7
19
vulnerability VCID-whgc-pt2s-77ar
20
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.10
2
url pkg:pypi/django@1.7.3
purl pkg:pypi/django@1.7.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-jfya-694v-myar
13
vulnerability VCID-kq8u-td31-uqaa
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-th75-ys47-d3h8
18
vulnerability VCID-u6sd-648r-qbdb
19
vulnerability VCID-vacy-878s-3kfb
20
vulnerability VCID-vdpf-jddk-syda
21
vulnerability VCID-weqb-fxu4-17e7
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.3
aliases CVE-2015-0219, GHSA-7qfw-j7hp-v45g, PYSEC-2015-4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5vmb-d4xp-zfgy
8
url VCID-66ax-8wdn-1bgb
vulnerability_id VCID-66ax-8wdn-1bgb
summary The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect, which might allow remote attackers to trigger arbitrary GET requests with an unintended source IP address via a crafted Location header.
references
0
reference_url http://openwall.com/lists/oss-security/2011/09/11/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/11/1
1
reference_url http://openwall.com/lists/oss-security/2011/09/13/2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/13/2
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-4138
reference_id
reference_type
scores
0
value 0.00635
scoring_system epss
scoring_elements 0.70822
published_at 2026-06-05T12:55:00Z
1
value 0.00635
scoring_system epss
scoring_elements 0.7078
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-4138
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=737366
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=737366
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4138
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4138
5
reference_url http://secunia.com/advisories/46614
reference_id
reference_type
scores
url http://secunia.com/advisories/46614
6
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
7
reference_url https://github.com/django/django/commit/1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0
8
reference_url https://github.com/django/django/commit/7268f8af86186518821d775c530d5558fd726930
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/7268f8af86186518821d775c530d5558fd726930
9
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-3.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-3.yaml
10
reference_url https://hermes.opensuse.org/messages/14700881
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://hermes.opensuse.org/messages/14700881
11
reference_url https://www.djangoproject.com/weblog/2011/sep/09
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/09
12
reference_url https://www.djangoproject.com/weblog/2011/sep/09/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/09/
13
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/10/127
14
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/10/127/
15
reference_url http://www.debian.org/security/2011/dsa-2332
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2011/dsa-2332
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
reference_id 641405
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-4138
reference_id CVE-2011-4138
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-4138
18
reference_url https://github.com/advisories/GHSA-wxg3-mfph-qg9w
reference_id GHSA-wxg3-mfph-qg9w
reference_type
scores
url https://github.com/advisories/GHSA-wxg3-mfph-qg9w
19
reference_url https://usn.ubuntu.com/1297-1/
reference_id USN-1297-1
reference_type
scores
url https://usn.ubuntu.com/1297-1/
fixed_packages
0
url pkg:pypi/django@1.2.7
purl pkg:pypi/django@1.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-7g7m-bfe1-wkhd
9
vulnerability VCID-7rz2-nqdn-hycc
10
vulnerability VCID-8gus-er59-1qak
11
vulnerability VCID-8v2c-7739-2ugp
12
vulnerability VCID-912q-3eks-4yfm
13
vulnerability VCID-9bsf-vm3b-ubhw
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ffsr-th58-p3ct
19
vulnerability VCID-ga69-9y5g-77c3
20
vulnerability VCID-jfya-694v-myar
21
vulnerability VCID-ksh8-pazn-dbca
22
vulnerability VCID-mccp-khb9-qkb7
23
vulnerability VCID-r7tk-79xy-jkhj
24
vulnerability VCID-rq19-9v21-47dy
25
vulnerability VCID-rxxr-sseq-k7a9
26
vulnerability VCID-ta66-7qrm-sbhu
27
vulnerability VCID-u4a7-uvcb-9kf8
28
vulnerability VCID-u6sd-648r-qbdb
29
vulnerability VCID-vdpf-jddk-syda
30
vulnerability VCID-vj5u-2ukv-audq
31
vulnerability VCID-weqb-fxu4-17e7
32
vulnerability VCID-whgc-pt2s-77ar
33
vulnerability VCID-xf2n-qua7-m7fb
34
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.7
1
url pkg:pypi/django@1.3.1
purl pkg:pypi/django@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-j7jf-zzvz-skgm
24
vulnerability VCID-jfya-694v-myar
25
vulnerability VCID-ksh8-pazn-dbca
26
vulnerability VCID-mccp-khb9-qkb7
27
vulnerability VCID-qu99-yudm-57fp
28
vulnerability VCID-r7tk-79xy-jkhj
29
vulnerability VCID-rq19-9v21-47dy
30
vulnerability VCID-rxxr-sseq-k7a9
31
vulnerability VCID-ta66-7qrm-sbhu
32
vulnerability VCID-u4a7-uvcb-9kf8
33
vulnerability VCID-u6sd-648r-qbdb
34
vulnerability VCID-vdpf-jddk-syda
35
vulnerability VCID-vj5u-2ukv-audq
36
vulnerability VCID-weqb-fxu4-17e7
37
vulnerability VCID-whgc-pt2s-77ar
38
vulnerability VCID-xf2n-qua7-m7fb
39
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.1
aliases CVE-2011-4138, GHSA-wxg3-mfph-qg9w, PYSEC-2011-3
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-66ax-8wdn-1bgb
9
url VCID-6w99-8w84-jkh9
vulnerability_id VCID-6w99-8w84-jkh9
summary Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token for the matched user account. (One mitigation in the new releases is to send password reset tokens only to the registered user email address.)
references
0
reference_url http://packetstormsecurity.com/files/155872/Django-Account-Hijack.html
reference_id
reference_type
scores
url http://packetstormsecurity.com/files/155872/Django-Account-Hijack.html
1
reference_url https://docs.djangoproject.com/en/dev/releases/security/
reference_id
reference_type
scores
url https://docs.djangoproject.com/en/dev/releases/security/
2
reference_url https://groups.google.com/forum/#!topic/django-announce/3oaB2rVH3a0
reference_id
reference_type
scores
url https://groups.google.com/forum/#!topic/django-announce/3oaB2rVH3a0
3
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCM2DPUI7TOZWN4A6JFQFUVQ2XGE7GUD/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCM2DPUI7TOZWN4A6JFQFUVQ2XGE7GUD/
4
reference_url https://seclists.org/bugtraq/2020/Jan/9
reference_id
reference_type
scores
url https://seclists.org/bugtraq/2020/Jan/9
5
reference_url https://security.gentoo.org/glsa/202004-17
reference_id
reference_type
scores
url https://security.gentoo.org/glsa/202004-17
6
reference_url https://security.netapp.com/advisory/ntap-20200110-0003/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20200110-0003/
7
reference_url https://usn.ubuntu.com/4224-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4224-1/
8
reference_url https://www.debian.org/security/2020/dsa-4598
reference_id
reference_type
scores
url https://www.debian.org/security/2020/dsa-4598
9
reference_url https://www.djangoproject.com/weblog/2019/dec/18/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2019/dec/18/security-releases/
fixed_packages
0
url pkg:pypi/django@1.11.27
purl pkg:pypi/django@1.11.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-9mpt-zxaw-kkeg
4
vulnerability VCID-bb8b-hq41-s7a6
5
vulnerability VCID-ga69-9y5g-77c3
6
vulnerability VCID-m4wa-xv9b-q7ce
7
vulnerability VCID-whgc-pt2s-77ar
8
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.27
1
url pkg:pypi/django@2.2.9
purl pkg:pypi/django@2.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4cp2-k4mn-8ffj
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-51tx-4tp9-kbcz
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6jpg-yrf8-cufy
6
vulnerability VCID-9end-mq19-rke5
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-attf-6gj8-ebaj
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-drwp-htkk-bkfh
11
vulnerability VCID-fhp8-tck4-mye4
12
vulnerability VCID-fksk-pr23-2yd8
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-hh9b-52xn-z7a9
15
vulnerability VCID-j81e-su1y-tqa6
16
vulnerability VCID-m4wa-xv9b-q7ce
17
vulnerability VCID-n9vn-4uxr-hkau
18
vulnerability VCID-na9w-xkvx-cbhd
19
vulnerability VCID-nss9-1yrb-x7f2
20
vulnerability VCID-q8r2-m9s6-rbek
21
vulnerability VCID-qvfs-2v1h-p3h4
22
vulnerability VCID-u9q1-63gf-7feh
23
vulnerability VCID-whgc-pt2s-77ar
24
vulnerability VCID-wnxx-rc7w-cke4
25
vulnerability VCID-ynt9-h6ww-h7e9
26
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.2.9
aliases PYSEC-2019-86
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6w99-8w84-jkh9
10
url VCID-6wah-r8vr-5qc4
vulnerability_id VCID-6wah-r8vr-5qc4
summary The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2016-0502.html
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0502.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2016-0504.html
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0504.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2016-0505.html
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0505.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2016-0506.html
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0506.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2513.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2513.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-2513
reference_id
reference_type
scores
0
value 0.0125
scoring_system epss
scoring_elements 0.79691
published_at 2026-06-05T12:55:00Z
1
value 0.0125
scoring_system epss
scoring_elements 0.79665
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-2513
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2512
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2512
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2513
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2513
8
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
9
reference_url https://github.com/django/django/commit/67b46ba7016da2d259c1ecc7d666d11f5e1cfaab
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/67b46ba7016da2d259c1ecc7d666d11f5e1cfaab
10
reference_url https://github.com/django/django/commit/af7d09b0c5c6ab68e629fd9baf736f9dd203b18e
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/af7d09b0c5c6ab68e629fd9baf736f9dd203b18e
11
reference_url https://github.com/django/django/commit/f4e6e02f7713a6924d16540be279909ff4091eb6
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/f4e6e02f7713a6924d16540be279909ff4091eb6
12
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-16.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-16.yaml
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-2513
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-2513
14
reference_url https://web.archive.org/web/20160322001143/http://www.securitytracker.com/id/1035152
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20160322001143/http://www.securitytracker.com/id/1035152
15
reference_url https://web.archive.org/web/20200228001222/http://www.securityfocus.com/bid/83878
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200228001222/http://www.securityfocus.com/bid/83878
16
reference_url https://www.djangoproject.com/weblog/2016/mar/01/security-releases
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2016/mar/01/security-releases
17
reference_url https://www.djangoproject.com/weblog/2016/mar/01/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2016/mar/01/security-releases/
18
reference_url http://www.debian.org/security/2016/dsa-3544
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3544
19
reference_url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
20
reference_url http://www.securityfocus.com/bid/83878
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/83878
21
reference_url http://www.securitytracker.com/id/1035152
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1035152
22
reference_url http://www.ubuntu.com/usn/USN-2915-1
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2915-1
23
reference_url http://www.ubuntu.com/usn/USN-2915-2
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2915-2
24
reference_url http://www.ubuntu.com/usn/USN-2915-3
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2915-3
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1311438
reference_id 1311438
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1311438
26
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816434
reference_id 816434
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816434
27
reference_url https://github.com/advisories/GHSA-fp6p-5xvw-m74f
reference_id GHSA-fp6p-5xvw-m74f
reference_type
scores
url https://github.com/advisories/GHSA-fp6p-5xvw-m74f
28
reference_url https://access.redhat.com/errata/RHSA-2016:0502
reference_id RHSA-2016:0502
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0502
29
reference_url https://access.redhat.com/errata/RHSA-2016:0503
reference_id RHSA-2016:0503
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0503
30
reference_url https://access.redhat.com/errata/RHSA-2016:0504
reference_id RHSA-2016:0504
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0504
31
reference_url https://access.redhat.com/errata/RHSA-2016:0505
reference_id RHSA-2016:0505
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0505
32
reference_url https://access.redhat.com/errata/RHSA-2016:0506
reference_id RHSA-2016:0506
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0506
33
reference_url https://usn.ubuntu.com/2915-1/
reference_id USN-2915-1
reference_type
scores
url https://usn.ubuntu.com/2915-1/
fixed_packages
0
url pkg:pypi/django@1.8.10
purl pkg:pypi/django@1.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-8gus-er59-1qak
6
vulnerability VCID-9mpt-zxaw-kkeg
7
vulnerability VCID-bb8b-hq41-s7a6
8
vulnerability VCID-c58g-7jpv-t7hc
9
vulnerability VCID-ga69-9y5g-77c3
10
vulnerability VCID-qy2a-mvpz-q7eh
11
vulnerability VCID-rruq-9scz-vbg8
12
vulnerability VCID-upbz-vg19-rugv
13
vulnerability VCID-vdpf-jddk-syda
14
vulnerability VCID-weqb-fxu4-17e7
15
vulnerability VCID-whgc-pt2s-77ar
16
vulnerability VCID-x61x-6b6k-h3bn
17
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.10
1
url pkg:pypi/django@1.9.3
purl pkg:pypi/django@1.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-8gus-er59-1qak
6
vulnerability VCID-9mpt-zxaw-kkeg
7
vulnerability VCID-bb8b-hq41-s7a6
8
vulnerability VCID-ga69-9y5g-77c3
9
vulnerability VCID-qy2a-mvpz-q7eh
10
vulnerability VCID-rruq-9scz-vbg8
11
vulnerability VCID-upbz-vg19-rugv
12
vulnerability VCID-vdpf-jddk-syda
13
vulnerability VCID-weqb-fxu4-17e7
14
vulnerability VCID-whgc-pt2s-77ar
15
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.3
aliases CVE-2016-2513, GHSA-fp6p-5xvw-m74f, PYSEC-2016-16
risk_score 1.4
exploitability 0.5
weighted_severity 2.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6wah-r8vr-5qc4
11
url VCID-7g7m-bfe1-wkhd
vulnerability_id VCID-7g7m-bfe1-wkhd
summary The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an image file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-3443
reference_id
reference_type
scores
0
value 0.01382
scoring_system epss
scoring_elements 0.80635
published_at 2026-06-04T12:55:00Z
1
value 0.01382
scoring_system epss
scoring_elements 0.80661
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-3443
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3443
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3443
2
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
3
reference_url https://github.com/django/django/commit/9ca0ff6268eeff92d0d0ac2c315d4b6a8e229155
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/9ca0ff6268eeff92d0d0ac2c315d4b6a8e229155
4
reference_url https://github.com/django/django/commit/da33d67181b53fe6cc737ac1220153814a1509f6
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/da33d67181b53fe6cc737ac1220153814a1509f6
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2012-3.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2012-3.yaml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-3443
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-3443
7
reference_url https://www.debian.org/security/2012/dsa-2529
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2012/dsa-2529
8
reference_url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued
9
reference_url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
10
reference_url https://www.mandriva.com/security/advisories?name=MDVSA-2012:143
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.mandriva.com/security/advisories?name=MDVSA-2012:143
11
reference_url https://www.openwall.com/lists/oss-security/2012/07/31/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.openwall.com/lists/oss-security/2012/07/31/1
12
reference_url https://www.openwall.com/lists/oss-security/2012/07/31/2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.openwall.com/lists/oss-security/2012/07/31/2
13
reference_url https://www.ubuntu.com/usn/USN-1560-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.ubuntu.com/usn/USN-1560-1
14
reference_url http://www.debian.org/security/2012/dsa-2529
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2012/dsa-2529
15
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2012:143
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2012:143
16
reference_url http://www.openwall.com/lists/oss-security/2012/07/31/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/07/31/1
17
reference_url http://www.openwall.com/lists/oss-security/2012/07/31/2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/07/31/2
18
reference_url http://www.ubuntu.com/usn/USN-1560-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-1560-1
19
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683364
reference_id 683364
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683364
20
reference_url https://github.com/advisories/GHSA-59w8-4wm2-4xw8
reference_id GHSA-59w8-4wm2-4xw8
reference_type
scores
url https://github.com/advisories/GHSA-59w8-4wm2-4xw8
21
reference_url https://usn.ubuntu.com/1560-1/
reference_id USN-1560-1
reference_type
scores
url https://usn.ubuntu.com/1560-1/
fixed_packages
0
url pkg:pypi/django@1.3.2
purl pkg:pypi/django@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7rz2-nqdn-hycc
12
vulnerability VCID-8gus-er59-1qak
13
vulnerability VCID-8v2c-7739-2ugp
14
vulnerability VCID-912q-3eks-4yfm
15
vulnerability VCID-9mpt-zxaw-kkeg
16
vulnerability VCID-bahz-gfxv-e3b2
17
vulnerability VCID-bb8b-hq41-s7a6
18
vulnerability VCID-dh12-js4b-h7fw
19
vulnerability VCID-ffsr-th58-p3ct
20
vulnerability VCID-ga69-9y5g-77c3
21
vulnerability VCID-j7jf-zzvz-skgm
22
vulnerability VCID-jfya-694v-myar
23
vulnerability VCID-ksh8-pazn-dbca
24
vulnerability VCID-mccp-khb9-qkb7
25
vulnerability VCID-qu99-yudm-57fp
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u6sd-648r-qbdb
32
vulnerability VCID-vdpf-jddk-syda
33
vulnerability VCID-weqb-fxu4-17e7
34
vulnerability VCID-whgc-pt2s-77ar
35
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.2
1
url pkg:pypi/django@1.4.1
purl pkg:pypi/django@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3juv-mecf-akdp
3
vulnerability VCID-3kza-a88p-kfg7
4
vulnerability VCID-3sg7-t77d-rkc6
5
vulnerability VCID-492e-xffn-3bds
6
vulnerability VCID-4tyd-97z5-z3ar
7
vulnerability VCID-5dxz-7swx-rygn
8
vulnerability VCID-5q58-pzt4-8uey
9
vulnerability VCID-5vmb-d4xp-zfgy
10
vulnerability VCID-6w99-8w84-jkh9
11
vulnerability VCID-6wah-r8vr-5qc4
12
vulnerability VCID-71t1-69yq-c7h6
13
vulnerability VCID-7rz2-nqdn-hycc
14
vulnerability VCID-8gus-er59-1qak
15
vulnerability VCID-8v2c-7739-2ugp
16
vulnerability VCID-912q-3eks-4yfm
17
vulnerability VCID-9bqp-b6rw-mye7
18
vulnerability VCID-9mpt-zxaw-kkeg
19
vulnerability VCID-bahz-gfxv-e3b2
20
vulnerability VCID-bb8b-hq41-s7a6
21
vulnerability VCID-dh12-js4b-h7fw
22
vulnerability VCID-ffsr-th58-p3ct
23
vulnerability VCID-g2z3-2h8p-c7ge
24
vulnerability VCID-ga69-9y5g-77c3
25
vulnerability VCID-j7jf-zzvz-skgm
26
vulnerability VCID-jfya-694v-myar
27
vulnerability VCID-kq8u-td31-uqaa
28
vulnerability VCID-ksh8-pazn-dbca
29
vulnerability VCID-mccp-khb9-qkb7
30
vulnerability VCID-ps24-pjj4-uqd1
31
vulnerability VCID-qu99-yudm-57fp
32
vulnerability VCID-r7tk-79xy-jkhj
33
vulnerability VCID-rq19-9v21-47dy
34
vulnerability VCID-rtjn-qccc-8kc7
35
vulnerability VCID-rxxr-sseq-k7a9
36
vulnerability VCID-ta66-7qrm-sbhu
37
vulnerability VCID-th75-ys47-d3h8
38
vulnerability VCID-u4a7-uvcb-9kf8
39
vulnerability VCID-u6sd-648r-qbdb
40
vulnerability VCID-vdpf-jddk-syda
41
vulnerability VCID-weqb-fxu4-17e7
42
vulnerability VCID-whgc-pt2s-77ar
43
vulnerability VCID-x212-mskt-9bbw
44
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.1
aliases CVE-2012-3443, GHSA-59w8-4wm2-4xw8, PYSEC-2012-3
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7g7m-bfe1-wkhd
12
url VCID-7rz2-nqdn-hycc
vulnerability_id VCID-7rz2-nqdn-hycc
summary The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0480.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0480.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0480
reference_id
reference_type
scores
0
value 0.00556
scoring_system epss
scoring_elements 0.68559
published_at 2026-06-05T12:55:00Z
1
value 0.00556
scoring_system epss
scoring_elements 0.68518
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0480
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
7
reference_url http://secunia.com/advisories/59782
reference_id
reference_type
scores
url http://secunia.com/advisories/59782
8
reference_url http://secunia.com/advisories/61276
reference_id
reference_type
scores
url http://secunia.com/advisories/61276
9
reference_url http://secunia.com/advisories/61281
reference_id
reference_type
scores
url http://secunia.com/advisories/61281
10
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
11
reference_url https://github.com/django/django/commit/45ac9d4fb087d21902469fc22643f5201d41a0cd
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/45ac9d4fb087d21902469fc22643f5201d41a0cd
12
reference_url https://github.com/django/django/commit/c2fe73133b62a1d9e8f7a6b43966570b14618d7e
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/c2fe73133b62a1d9e8f7a6b43966570b14618d7e
13
reference_url https://github.com/django/django/commit/da051da8df5e69944745072611351d4cfc6435d5
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/da051da8df5e69944745072611351d4cfc6435d5
14
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-4.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-4.yaml
15
reference_url https://web.archive.org/web/20140918034351/http://www.securityfocus.com/bid/69425
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140918034351/http://www.securityfocus.com/bid/69425
16
reference_url https://www.djangoproject.com/weblog/2014/aug/20/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2014/aug/20/security
17
reference_url https://www.djangoproject.com/weblog/2014/aug/20/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2014/aug/20/security/
18
reference_url http://www.debian.org/security/2014/dsa-3010
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2014/dsa-3010
19
reference_url http://www.securityfocus.com/bid/69425
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/69425
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1129950
reference_id 1129950
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1129950
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0480
reference_id CVE-2014-0480
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0480
22
reference_url https://github.com/advisories/GHSA-f7cm-ccfp-3q4r
reference_id GHSA-f7cm-ccfp-3q4r
reference_type
scores
url https://github.com/advisories/GHSA-f7cm-ccfp-3q4r
23
reference_url https://security.gentoo.org/glsa/201412-22
reference_id GLSA-201412-22
reference_type
scores
url https://security.gentoo.org/glsa/201412-22
24
reference_url https://usn.ubuntu.com/2347-1/
reference_id USN-2347-1
reference_type
scores
url https://usn.ubuntu.com/2347-1/
fixed_packages
0
url pkg:pypi/django@1.4.14
purl pkg:pypi/django@1.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-8gus-er59-1qak
9
vulnerability VCID-912q-3eks-4yfm
10
vulnerability VCID-9mpt-zxaw-kkeg
11
vulnerability VCID-bahz-gfxv-e3b2
12
vulnerability VCID-bb8b-hq41-s7a6
13
vulnerability VCID-dh12-js4b-h7fw
14
vulnerability VCID-ga69-9y5g-77c3
15
vulnerability VCID-jfya-694v-myar
16
vulnerability VCID-kq8u-td31-uqaa
17
vulnerability VCID-ksh8-pazn-dbca
18
vulnerability VCID-mccp-khb9-qkb7
19
vulnerability VCID-rxxr-sseq-k7a9
20
vulnerability VCID-ta66-7qrm-sbhu
21
vulnerability VCID-th75-ys47-d3h8
22
vulnerability VCID-u6sd-648r-qbdb
23
vulnerability VCID-vdpf-jddk-syda
24
vulnerability VCID-weqb-fxu4-17e7
25
vulnerability VCID-whgc-pt2s-77ar
26
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.14
1
url pkg:pypi/django@1.5.9
purl pkg:pypi/django@1.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-912q-3eks-4yfm
9
vulnerability VCID-9mpt-zxaw-kkeg
10
vulnerability VCID-bahz-gfxv-e3b2
11
vulnerability VCID-bb8b-hq41-s7a6
12
vulnerability VCID-dh12-js4b-h7fw
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-jfya-694v-myar
15
vulnerability VCID-ksh8-pazn-dbca
16
vulnerability VCID-mccp-khb9-qkb7
17
vulnerability VCID-rxxr-sseq-k7a9
18
vulnerability VCID-ta66-7qrm-sbhu
19
vulnerability VCID-u6sd-648r-qbdb
20
vulnerability VCID-vdpf-jddk-syda
21
vulnerability VCID-weqb-fxu4-17e7
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.9
2
url pkg:pypi/django@1.6.6
purl pkg:pypi/django@1.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-912q-3eks-4yfm
9
vulnerability VCID-9mpt-zxaw-kkeg
10
vulnerability VCID-bahz-gfxv-e3b2
11
vulnerability VCID-bb8b-hq41-s7a6
12
vulnerability VCID-dh12-js4b-h7fw
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-jfya-694v-myar
15
vulnerability VCID-ksh8-pazn-dbca
16
vulnerability VCID-mccp-khb9-qkb7
17
vulnerability VCID-rxxr-sseq-k7a9
18
vulnerability VCID-ta66-7qrm-sbhu
19
vulnerability VCID-u6sd-648r-qbdb
20
vulnerability VCID-vacy-878s-3kfb
21
vulnerability VCID-vdpf-jddk-syda
22
vulnerability VCID-weqb-fxu4-17e7
23
vulnerability VCID-whgc-pt2s-77ar
24
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.6
aliases CVE-2014-0480, GHSA-f7cm-ccfp-3q4r, PYSEC-2014-4
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7rz2-nqdn-hycc
13
url VCID-8gus-er59-1qak
vulnerability_id VCID-8gus-er59-1qak
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9014.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9014.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9014
reference_id
reference_type
scores
0
value 0.03671
scoring_system epss
scoring_elements 0.8813
published_at 2026-06-05T12:55:00Z
1
value 0.03671
scoring_system epss
scoring_elements 0.88109
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9014
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9013
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9013
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9014
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9014
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7233
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7233
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7234
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7234
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
8
reference_url https://github.com/django/django/commit/45acd6d836895a4c36575f48b3fb36a3dae98d19
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/45acd6d836895a4c36575f48b3fb36a3dae98d19
9
reference_url https://github.com/django/django/commit/884e113838e5a72b4b0ec9e5e87aa480f6aa4472
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/884e113838e5a72b4b0ec9e5e87aa480f6aa4472
10
reference_url https://github.com/django/django/commit/c401ae9a7dfb1a94a8a61927ed541d6f93089587
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/c401ae9a7dfb1a94a8a61927ed541d6f93089587
11
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-18.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-18.yaml
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OG5ROMUPS6C7BXELD3TAUUH7OBYV56WQ
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OG5ROMUPS6C7BXELD3TAUUH7OBYV56WQ
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OG5ROMUPS6C7BXELD3TAUUH7OBYV56WQ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OG5ROMUPS6C7BXELD3TAUUH7OBYV56WQ/
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXDKJYHN74BWY3P7AR2UZDVJREQMRE6S
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXDKJYHN74BWY3P7AR2UZDVJREQMRE6S
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXDKJYHN74BWY3P7AR2UZDVJREQMRE6S/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXDKJYHN74BWY3P7AR2UZDVJREQMRE6S/
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-9014
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-9014
17
reference_url https://web.archive.org/web/20210123185619/http://www.securityfocus.com/bid/94068
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210123185619/http://www.securityfocus.com/bid/94068
18
reference_url https://web.archive.org/web/20211204043252/http://www.securitytracker.com/id/1037159
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20211204043252/http://www.securitytracker.com/id/1037159
19
reference_url https://www.djangoproject.com/weblog/2016/nov/01/security-releases
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2016/nov/01/security-releases
20
reference_url https://www.djangoproject.com/weblog/2016/nov/01/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2016/nov/01/security-releases/
21
reference_url http://www.debian.org/security/2017/dsa-3835
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2017/dsa-3835
22
reference_url http://www.securityfocus.com/bid/94068
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/94068
23
reference_url http://www.securitytracker.com/id/1037159
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1037159
24
reference_url http://www.ubuntu.com/usn/USN-3115-1
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-3115-1
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1389417
reference_id 1389417
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1389417
26
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842856
reference_id 842856
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842856
27
reference_url https://security.archlinux.org/ASA-201611-15
reference_id ASA-201611-15
reference_type
scores
url https://security.archlinux.org/ASA-201611-15
28
reference_url https://security.archlinux.org/AVG-57
reference_id AVG-57
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-57
29
reference_url https://github.com/advisories/GHSA-3f2c-jm6v-cr35
reference_id GHSA-3f2c-jm6v-cr35
reference_type
scores
url https://github.com/advisories/GHSA-3f2c-jm6v-cr35
30
reference_url https://usn.ubuntu.com/3115-1/
reference_id USN-3115-1
reference_type
scores
url https://usn.ubuntu.com/3115-1/
fixed_packages
0
url pkg:pypi/django@1.8.16
purl pkg:pypi/django@1.8.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-6w99-8w84-jkh9
4
vulnerability VCID-9mpt-zxaw-kkeg
5
vulnerability VCID-bb8b-hq41-s7a6
6
vulnerability VCID-c58g-7jpv-t7hc
7
vulnerability VCID-ga69-9y5g-77c3
8
vulnerability VCID-rruq-9scz-vbg8
9
vulnerability VCID-upbz-vg19-rugv
10
vulnerability VCID-vdpf-jddk-syda
11
vulnerability VCID-whgc-pt2s-77ar
12
vulnerability VCID-x61x-6b6k-h3bn
13
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.16
1
url pkg:pypi/django@1.9.11
purl pkg:pypi/django@1.9.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-6w99-8w84-jkh9
4
vulnerability VCID-9mpt-zxaw-kkeg
5
vulnerability VCID-bb8b-hq41-s7a6
6
vulnerability VCID-ga69-9y5g-77c3
7
vulnerability VCID-rruq-9scz-vbg8
8
vulnerability VCID-upbz-vg19-rugv
9
vulnerability VCID-vdpf-jddk-syda
10
vulnerability VCID-whgc-pt2s-77ar
11
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.11
2
url pkg:pypi/django@1.10.3
purl pkg:pypi/django@1.10.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-6w99-8w84-jkh9
4
vulnerability VCID-9mpt-zxaw-kkeg
5
vulnerability VCID-bb8b-hq41-s7a6
6
vulnerability VCID-ga69-9y5g-77c3
7
vulnerability VCID-hpj4-a9fa-4bca
8
vulnerability VCID-rruq-9scz-vbg8
9
vulnerability VCID-upbz-vg19-rugv
10
vulnerability VCID-vdpf-jddk-syda
11
vulnerability VCID-whgc-pt2s-77ar
12
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.3
aliases CVE-2016-9014, GHSA-3f2c-jm6v-cr35, PYSEC-2016-18
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8gus-er59-1qak
14
url VCID-8v2c-7739-2ugp
vulnerability_id VCID-8v2c-7739-2ugp
summary The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field parameter in a popup action to an admin change form page, as demonstrated by a /admin/auth/user/?pop=1&t=password URI.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0483.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0483.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0483
reference_id
reference_type
scores
0
value 0.00428
scoring_system epss
scoring_elements 0.62776
published_at 2026-06-04T12:55:00Z
1
value 0.00428
scoring_system epss
scoring_elements 0.62819
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0483
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
7
reference_url http://secunia.com/advisories/59782
reference_id
reference_type
scores
url http://secunia.com/advisories/59782
8
reference_url http://secunia.com/advisories/61276
reference_id
reference_type
scores
url http://secunia.com/advisories/61276
9
reference_url http://secunia.com/advisories/61281
reference_id
reference_type
scores
url http://secunia.com/advisories/61281
10
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
11
reference_url https://github.com/django/django/commit/027bd348642007617518379f8b02546abacaa6e0
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/027bd348642007617518379f8b02546abacaa6e0
12
reference_url https://github.com/django/django/commit/2a446c896e7c814661fb9c4f212b071b2a7fa446
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/2a446c896e7c814661fb9c4f212b071b2a7fa446
13
reference_url https://github.com/django/django/commit/2b31342cdf14fc20e07c43d258f1e7334ad664a6
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/2b31342cdf14fc20e07c43d258f1e7334ad664a6
14
reference_url https://github.com/django/django/commit/f7c494f2506250b8cb5923714360a3642ed63e0f
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/f7c494f2506250b8cb5923714360a3642ed63e0f
15
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-7.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-7.yaml
16
reference_url https://web.archive.org/web/20151016194735/http://secunia.com/advisories/61276
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20151016194735/http://secunia.com/advisories/61276
17
reference_url https://web.archive.org/web/20151016202523/http://secunia.com/advisories/59782
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20151016202523/http://secunia.com/advisories/59782
18
reference_url https://web.archive.org/web/20151023143840/http://secunia.com/advisories/61281
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20151023143840/http://secunia.com/advisories/61281
19
reference_url https://www.djangoproject.com/weblog/2014/aug/20/security
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2014/aug/20/security
20
reference_url https://www.djangoproject.com/weblog/2014/aug/20/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2014/aug/20/security/
21
reference_url http://www.debian.org/security/2014/dsa-3010
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2014/dsa-3010
22
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1129959
reference_id 1129959
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1129959
23
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0483
reference_id CVE-2014-0483
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0483
24
reference_url https://github.com/advisories/GHSA-rw75-m7gp-92m3
reference_id GHSA-rw75-m7gp-92m3
reference_type
scores
url https://github.com/advisories/GHSA-rw75-m7gp-92m3
25
reference_url https://security.gentoo.org/glsa/201412-22
reference_id GLSA-201412-22
reference_type
scores
url https://security.gentoo.org/glsa/201412-22
26
reference_url https://usn.ubuntu.com/2347-1/
reference_id USN-2347-1
reference_type
scores
url https://usn.ubuntu.com/2347-1/
fixed_packages
0
url pkg:pypi/django@1.4.14
purl pkg:pypi/django@1.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-8gus-er59-1qak
9
vulnerability VCID-912q-3eks-4yfm
10
vulnerability VCID-9mpt-zxaw-kkeg
11
vulnerability VCID-bahz-gfxv-e3b2
12
vulnerability VCID-bb8b-hq41-s7a6
13
vulnerability VCID-dh12-js4b-h7fw
14
vulnerability VCID-ga69-9y5g-77c3
15
vulnerability VCID-jfya-694v-myar
16
vulnerability VCID-kq8u-td31-uqaa
17
vulnerability VCID-ksh8-pazn-dbca
18
vulnerability VCID-mccp-khb9-qkb7
19
vulnerability VCID-rxxr-sseq-k7a9
20
vulnerability VCID-ta66-7qrm-sbhu
21
vulnerability VCID-th75-ys47-d3h8
22
vulnerability VCID-u6sd-648r-qbdb
23
vulnerability VCID-vdpf-jddk-syda
24
vulnerability VCID-weqb-fxu4-17e7
25
vulnerability VCID-whgc-pt2s-77ar
26
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.14
1
url pkg:pypi/django@1.5.9
purl pkg:pypi/django@1.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-912q-3eks-4yfm
9
vulnerability VCID-9mpt-zxaw-kkeg
10
vulnerability VCID-bahz-gfxv-e3b2
11
vulnerability VCID-bb8b-hq41-s7a6
12
vulnerability VCID-dh12-js4b-h7fw
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-jfya-694v-myar
15
vulnerability VCID-ksh8-pazn-dbca
16
vulnerability VCID-mccp-khb9-qkb7
17
vulnerability VCID-rxxr-sseq-k7a9
18
vulnerability VCID-ta66-7qrm-sbhu
19
vulnerability VCID-u6sd-648r-qbdb
20
vulnerability VCID-vdpf-jddk-syda
21
vulnerability VCID-weqb-fxu4-17e7
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.9
2
url pkg:pypi/django@1.6.6
purl pkg:pypi/django@1.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-912q-3eks-4yfm
9
vulnerability VCID-9mpt-zxaw-kkeg
10
vulnerability VCID-bahz-gfxv-e3b2
11
vulnerability VCID-bb8b-hq41-s7a6
12
vulnerability VCID-dh12-js4b-h7fw
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-jfya-694v-myar
15
vulnerability VCID-ksh8-pazn-dbca
16
vulnerability VCID-mccp-khb9-qkb7
17
vulnerability VCID-rxxr-sseq-k7a9
18
vulnerability VCID-ta66-7qrm-sbhu
19
vulnerability VCID-u6sd-648r-qbdb
20
vulnerability VCID-vacy-878s-3kfb
21
vulnerability VCID-vdpf-jddk-syda
22
vulnerability VCID-weqb-fxu4-17e7
23
vulnerability VCID-whgc-pt2s-77ar
24
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.6
3
url pkg:pypi/django@1.7rc3
purl pkg:pypi/django@1.7rc3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7rc3
aliases CVE-2014-0483, GHSA-rw75-m7gp-92m3, PYSEC-2014-7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8v2c-7739-2ugp
15
url VCID-912q-3eks-4yfm
vulnerability_id VCID-912q-3eks-4yfm
summary The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL, related to redirect URLs, as demonstrated by a "\njavascript:" URL.
references
0
reference_url http://advisories.mageia.org/MGASA-2015-0026.html
reference_id
reference_type
scores
url http://advisories.mageia.org/MGASA-2015-0026.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
5
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0220.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0220.json
6
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-0220
reference_id
reference_type
scores
0
value 0.02154
scoring_system epss
scoring_elements 0.84577
published_at 2026-06-04T12:55:00Z
1
value 0.02154
scoring_system epss
scoring_elements 0.84601
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-0220
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0219
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0219
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0220
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0220
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0221
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0221
10
reference_url http://secunia.com/advisories/62285
reference_id
reference_type
scores
url http://secunia.com/advisories/62285
11
reference_url http://secunia.com/advisories/62309
reference_id
reference_type
scores
url http://secunia.com/advisories/62309
12
reference_url http://secunia.com/advisories/62718
reference_id
reference_type
scores
url http://secunia.com/advisories/62718
13
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
14
reference_url https://github.com/django/django/blob/4555a823fd57e261e1b19c778429473256c8ea08/docs/releases/1.4.18.txt#L34-L46
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/blob/4555a823fd57e261e1b19c778429473256c8ea08/docs/releases/1.4.18.txt#L34-L46
15
reference_url https://github.com/django/django/commit/4c241f1b710da6419d9dca160e80b23b82db7758
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/4c241f1b710da6419d9dca160e80b23b82db7758
16
reference_url https://github.com/django/django/commit/72e0b033662faa11bb7f516f18a132728aa0ae28
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/72e0b033662faa11bb7f516f18a132728aa0ae28
17
reference_url https://github.com/django/django/commit/de67dedc771ad2edec15c1d00c083a1a084e1e89
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/de67dedc771ad2edec15c1d00c083a1a084e1e89
18
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-5.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-5.yaml
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-0220
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-0220
20
reference_url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62285
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62285
21
reference_url https://web.archive.org/web/20150523054951/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:109/?name=MDVSA-2015:109
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150523054951/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:109/?name=MDVSA-2015:109
22
reference_url https://web.archive.org/web/20150523054953/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:036/?name=MDVSA-2015:036
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150523054953/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:036/?name=MDVSA-2015:036
23
reference_url https://web.archive.org/web/20151104201446/http://secunia.com/advisories/62718
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20151104201446/http://secunia.com/advisories/62718
24
reference_url https://www.djangoproject.com/weblog/2015/jan/13/security
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2015/jan/13/security
25
reference_url https://www.djangoproject.com/weblog/2015/jan/13/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/jan/13/security/
26
reference_url http://ubuntu.com/usn/usn-2469-1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://ubuntu.com/usn/usn-2469-1
27
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:036
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:036
28
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
29
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1179675
reference_id 1179675
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1179675
30
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775375
reference_id 775375
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775375
31
reference_url https://github.com/advisories/GHSA-gv98-g628-m9x5
reference_id GHSA-gv98-g628-m9x5
reference_type
scores
url https://github.com/advisories/GHSA-gv98-g628-m9x5
32
reference_url https://usn.ubuntu.com/2469-1/
reference_id USN-2469-1
reference_type
scores
url https://usn.ubuntu.com/2469-1/
fixed_packages
0
url pkg:pypi/django@1.4.18
purl pkg:pypi/django@1.4.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-jfya-694v-myar
13
vulnerability VCID-kq8u-td31-uqaa
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-th75-ys47-d3h8
18
vulnerability VCID-u6sd-648r-qbdb
19
vulnerability VCID-vdpf-jddk-syda
20
vulnerability VCID-weqb-fxu4-17e7
21
vulnerability VCID-whgc-pt2s-77ar
22
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.18
1
url pkg:pypi/django@1.6.10
purl pkg:pypi/django@1.6.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-6wah-r8vr-5qc4
6
vulnerability VCID-8gus-er59-1qak
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-bahz-gfxv-e3b2
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-jfya-694v-myar
12
vulnerability VCID-ksh8-pazn-dbca
13
vulnerability VCID-mccp-khb9-qkb7
14
vulnerability VCID-rxxr-sseq-k7a9
15
vulnerability VCID-u6sd-648r-qbdb
16
vulnerability VCID-vacy-878s-3kfb
17
vulnerability VCID-vdpf-jddk-syda
18
vulnerability VCID-weqb-fxu4-17e7
19
vulnerability VCID-whgc-pt2s-77ar
20
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.10
2
url pkg:pypi/django@1.7.3
purl pkg:pypi/django@1.7.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-jfya-694v-myar
13
vulnerability VCID-kq8u-td31-uqaa
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-th75-ys47-d3h8
18
vulnerability VCID-u6sd-648r-qbdb
19
vulnerability VCID-vacy-878s-3kfb
20
vulnerability VCID-vdpf-jddk-syda
21
vulnerability VCID-weqb-fxu4-17e7
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.3
aliases CVE-2015-0220, GHSA-gv98-g628-m9x5, PYSEC-2015-5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-912q-3eks-4yfm
16
url VCID-9bsf-vm3b-ubhw
vulnerability_id VCID-9bsf-vm3b-ubhw
summary The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-3442
reference_id
reference_type
scores
0
value 0.00496
scoring_system epss
scoring_elements 0.66158
published_at 2026-06-04T12:55:00Z
1
value 0.00496
scoring_system epss
scoring_elements 0.6621
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-3442
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3442
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3442
2
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
3
reference_url https://github.com/django/django/commit/4dea4883e6c50d75f215a6b9bcbd95273f57c72d
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/4dea4883e6c50d75f215a6b9bcbd95273f57c72d
4
reference_url https://github.com/django/django/commit/e34685034b60be1112160e76091e5aee60149fa1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/e34685034b60be1112160e76091e5aee60149fa1
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2012-2.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2012-2.yaml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-3442
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-3442
7
reference_url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued
8
reference_url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
9
reference_url http://www.debian.org/security/2012/dsa-2529
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2012/dsa-2529
10
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2012:143
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2012:143
11
reference_url http://www.openwall.com/lists/oss-security/2012/07/31/1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/07/31/1
12
reference_url http://www.openwall.com/lists/oss-security/2012/07/31/2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/07/31/2
13
reference_url http://www.ubuntu.com/usn/USN-1560-1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-1560-1
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683364
reference_id 683364
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683364
15
reference_url https://github.com/advisories/GHSA-78vx-ggch-wghm
reference_id GHSA-78vx-ggch-wghm
reference_type
scores
url https://github.com/advisories/GHSA-78vx-ggch-wghm
16
reference_url https://usn.ubuntu.com/1560-1/
reference_id USN-1560-1
reference_type
scores
url https://usn.ubuntu.com/1560-1/
fixed_packages
0
url pkg:pypi/django@1.3.2
purl pkg:pypi/django@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7rz2-nqdn-hycc
12
vulnerability VCID-8gus-er59-1qak
13
vulnerability VCID-8v2c-7739-2ugp
14
vulnerability VCID-912q-3eks-4yfm
15
vulnerability VCID-9mpt-zxaw-kkeg
16
vulnerability VCID-bahz-gfxv-e3b2
17
vulnerability VCID-bb8b-hq41-s7a6
18
vulnerability VCID-dh12-js4b-h7fw
19
vulnerability VCID-ffsr-th58-p3ct
20
vulnerability VCID-ga69-9y5g-77c3
21
vulnerability VCID-j7jf-zzvz-skgm
22
vulnerability VCID-jfya-694v-myar
23
vulnerability VCID-ksh8-pazn-dbca
24
vulnerability VCID-mccp-khb9-qkb7
25
vulnerability VCID-qu99-yudm-57fp
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u6sd-648r-qbdb
32
vulnerability VCID-vdpf-jddk-syda
33
vulnerability VCID-weqb-fxu4-17e7
34
vulnerability VCID-whgc-pt2s-77ar
35
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.2
1
url pkg:pypi/django@1.4.1
purl pkg:pypi/django@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3juv-mecf-akdp
3
vulnerability VCID-3kza-a88p-kfg7
4
vulnerability VCID-3sg7-t77d-rkc6
5
vulnerability VCID-492e-xffn-3bds
6
vulnerability VCID-4tyd-97z5-z3ar
7
vulnerability VCID-5dxz-7swx-rygn
8
vulnerability VCID-5q58-pzt4-8uey
9
vulnerability VCID-5vmb-d4xp-zfgy
10
vulnerability VCID-6w99-8w84-jkh9
11
vulnerability VCID-6wah-r8vr-5qc4
12
vulnerability VCID-71t1-69yq-c7h6
13
vulnerability VCID-7rz2-nqdn-hycc
14
vulnerability VCID-8gus-er59-1qak
15
vulnerability VCID-8v2c-7739-2ugp
16
vulnerability VCID-912q-3eks-4yfm
17
vulnerability VCID-9bqp-b6rw-mye7
18
vulnerability VCID-9mpt-zxaw-kkeg
19
vulnerability VCID-bahz-gfxv-e3b2
20
vulnerability VCID-bb8b-hq41-s7a6
21
vulnerability VCID-dh12-js4b-h7fw
22
vulnerability VCID-ffsr-th58-p3ct
23
vulnerability VCID-g2z3-2h8p-c7ge
24
vulnerability VCID-ga69-9y5g-77c3
25
vulnerability VCID-j7jf-zzvz-skgm
26
vulnerability VCID-jfya-694v-myar
27
vulnerability VCID-kq8u-td31-uqaa
28
vulnerability VCID-ksh8-pazn-dbca
29
vulnerability VCID-mccp-khb9-qkb7
30
vulnerability VCID-ps24-pjj4-uqd1
31
vulnerability VCID-qu99-yudm-57fp
32
vulnerability VCID-r7tk-79xy-jkhj
33
vulnerability VCID-rq19-9v21-47dy
34
vulnerability VCID-rtjn-qccc-8kc7
35
vulnerability VCID-rxxr-sseq-k7a9
36
vulnerability VCID-ta66-7qrm-sbhu
37
vulnerability VCID-th75-ys47-d3h8
38
vulnerability VCID-u4a7-uvcb-9kf8
39
vulnerability VCID-u6sd-648r-qbdb
40
vulnerability VCID-vdpf-jddk-syda
41
vulnerability VCID-weqb-fxu4-17e7
42
vulnerability VCID-whgc-pt2s-77ar
43
vulnerability VCID-x212-mskt-9bbw
44
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.1
aliases CVE-2012-3442, GHSA-78vx-ggch-wghm, PYSEC-2012-2
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9bsf-vm3b-ubhw
17
url VCID-9mpt-zxaw-kkeg
vulnerability_id VCID-9mpt-zxaw-kkeg
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-33203.json
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-33203.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33203
reference_id
reference_type
scores
0
value 0.00143
scoring_system epss
scoring_elements 0.34225
published_at 2026-06-05T12:55:00Z
1
value 0.00143
scoring_system epss
scoring_elements 0.34125
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33203
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33203
3
reference_url https://docs.djangoproject.com/en/3.2/releases/security
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/3.2/releases/security
4
reference_url https://docs.djangoproject.com/en/3.2/releases/security/
reference_id
reference_type
scores
url https://docs.djangoproject.com/en/3.2/releases/security/
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://github.com/advisories/GHSA-68w8-qjq3-2gfm
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-68w8-qjq3-2gfm
7
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
8
reference_url https://github.com/django/django/commit/053cc9534d174dc89daba36724ed2dcb36755b90
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/053cc9534d174dc89daba36724ed2dcb36755b90
9
reference_url https://github.com/django/django/commit/20c67a0693c4ede2b09af02574823485e82e4c8f
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/20c67a0693c4ede2b09af02574823485e82e4c8f
10
reference_url https://github.com/django/django/commit/dfaba12cda060b8b292ae1d271b44bf810b1c5b9
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/dfaba12cda060b8b292ae1d271b44bf810b1c5b9
11
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-98.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-98.yaml
12
reference_url https://groups.google.com/forum/#!forum/django-announce
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!forum/django-announce
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV
14
reference_url https://security.netapp.com/advisory/ntap-20210727-0004
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20210727-0004
15
reference_url https://www.djangoproject.com/weblog/2021/jun/02/security-releases
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2021/jun/02/security-releases
16
reference_url https://www.djangoproject.com/weblog/2021/jun/02/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2021/jun/02/security-releases/
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1966251
reference_id 1966251
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1966251
18
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989394
reference_id 989394
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989394
19
reference_url https://security.archlinux.org/ASA-202106-41
reference_id ASA-202106-41
reference_type
scores
url https://security.archlinux.org/ASA-202106-41
20
reference_url https://security.archlinux.org/AVG-2026
reference_id AVG-2026
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2026
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33203
reference_id CVE-2021-33203
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33203
22
reference_url https://security.gentoo.org/glsa/202509-03
reference_id GLSA-202509-03
reference_type
scores
url https://security.gentoo.org/glsa/202509-03
23
reference_url https://access.redhat.com/errata/RHSA-2021:3490
reference_id RHSA-2021:3490
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3490
24
reference_url https://access.redhat.com/errata/RHSA-2021:4702
reference_id RHSA-2021:4702
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4702
25
reference_url https://access.redhat.com/errata/RHSA-2021:5070
reference_id RHSA-2021:5070
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5070
26
reference_url https://usn.ubuntu.com/4975-1/
reference_id USN-4975-1
reference_type
scores
url https://usn.ubuntu.com/4975-1/
27
reference_url https://usn.ubuntu.com/4975-2/
reference_id USN-4975-2
reference_type
scores
url https://usn.ubuntu.com/4975-2/
fixed_packages
0
url pkg:pypi/django@2.2.24
purl pkg:pypi/django@2.2.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-51tx-4tp9-kbcz
3
vulnerability VCID-6jpg-yrf8-cufy
4
vulnerability VCID-9end-mq19-rke5
5
vulnerability VCID-attf-6gj8-ebaj
6
vulnerability VCID-bb8b-hq41-s7a6
7
vulnerability VCID-drwp-htkk-bkfh
8
vulnerability VCID-fksk-pr23-2yd8
9
vulnerability VCID-ga69-9y5g-77c3
10
vulnerability VCID-n9vn-4uxr-hkau
11
vulnerability VCID-nss9-1yrb-x7f2
12
vulnerability VCID-whgc-pt2s-77ar
13
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.2.24
1
url pkg:pypi/django@3.1.12
purl pkg:pypi/django@3.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4pb2-tqru-uufs
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-bb8b-hq41-s7a6
4
vulnerability VCID-ga69-9y5g-77c3
5
vulnerability VCID-n9vn-4uxr-hkau
6
vulnerability VCID-whgc-pt2s-77ar
7
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.12
2
url pkg:pypi/django@3.2.4
purl pkg:pypi/django@3.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-2n2n-1fq2-7bbs
2
vulnerability VCID-4pb2-tqru-uufs
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-4z4e-8ttu-tyd6
5
vulnerability VCID-51tx-4tp9-kbcz
6
vulnerability VCID-6jpg-yrf8-cufy
7
vulnerability VCID-9end-mq19-rke5
8
vulnerability VCID-am3f-c5ex-8ff2
9
vulnerability VCID-attf-6gj8-ebaj
10
vulnerability VCID-au8h-vj9k-pufv
11
vulnerability VCID-bb8b-hq41-s7a6
12
vulnerability VCID-drwp-htkk-bkfh
13
vulnerability VCID-f4a7-tcz5-byfj
14
vulnerability VCID-fksk-pr23-2yd8
15
vulnerability VCID-fsaw-3ta1-x3dw
16
vulnerability VCID-ga69-9y5g-77c3
17
vulnerability VCID-m1dr-sjmw-jfd2
18
vulnerability VCID-m33h-4p9q-63fb
19
vulnerability VCID-n9vn-4uxr-hkau
20
vulnerability VCID-nss9-1yrb-x7f2
21
vulnerability VCID-qgp1-4efd-6yg6
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-ynt9-h6ww-h7e9
24
vulnerability VCID-yuda-1mur-8bbq
25
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2.4
aliases BIT-django-2021-33203, CVE-2021-33203, GHSA-68w8-qjq3-2gfm, PYSEC-2021-98
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9mpt-zxaw-kkeg
18
url VCID-bahz-gfxv-e3b2
vulnerability_id VCID-bahz-gfxv-e3b2
summary The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control character in a URL, as demonstrated by a \x08javascript: URL.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155421.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155421.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160263.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160263.html
2
reference_url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2317.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2317.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2317
reference_id
reference_type
scores
0
value 0.02884
scoring_system epss
scoring_elements 0.86572
published_at 2026-06-04T12:55:00Z
1
value 0.02884
scoring_system epss
scoring_elements 0.86595
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2317
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2317
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2317
7
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
8
reference_url https://github.com/django/django/commit/2342693b31f740a422abf7267c53b4e7bc487c1b
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/2342693b31f740a422abf7267c53b4e7bc487c1b
9
reference_url https://github.com/django/django/commit/2a4113dbd532ce952308992633d802dc169a75f1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/2a4113dbd532ce952308992633d802dc169a75f1
10
reference_url https://github.com/django/django/commit/5510f070711540aaa8d3707776cd77494e688ef9
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/5510f070711540aaa8d3707776cd77494e688ef9
11
reference_url https://github.com/django/django/commit/770427c2896a078925abfca2317486b284d22f04
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/770427c2896a078925abfca2317486b284d22f04
12
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-9.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-9.yaml
13
reference_url https://web.archive.org/web/20200228131706/http://www.securityfocus.com/bid/73319
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200228131706/http://www.securityfocus.com/bid/73319
14
reference_url https://www.djangoproject.com/weblog/2015/mar/18/security-releases
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2015/mar/18/security-releases
15
reference_url https://www.djangoproject.com/weblog/2015/mar/18/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/mar/18/security-releases/
16
reference_url http://ubuntu.com/usn/usn-2539-1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://ubuntu.com/usn/usn-2539-1
17
reference_url http://www.debian.org/security/2015/dsa-3204
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2015/dsa-3204
18
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:195
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:195
19
reference_url http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
20
reference_url http://www.securityfocus.com/bid/73319
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/73319
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1202818
reference_id 1202818
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1202818
22
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780873
reference_id 780873
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780873
23
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-2317
reference_id CVE-2015-2317
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-2317
24
reference_url https://github.com/advisories/GHSA-7fq8-4pv5-5w5c
reference_id GHSA-7fq8-4pv5-5w5c
reference_type
scores
url https://github.com/advisories/GHSA-7fq8-4pv5-5w5c
25
reference_url https://usn.ubuntu.com/2539-1/
reference_id USN-2539-1
reference_type
scores
url https://usn.ubuntu.com/2539-1/
fixed_packages
0
url pkg:pypi/django@1.4.20
purl pkg:pypi/django@1.4.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-jfya-694v-myar
12
vulnerability VCID-kq8u-td31-uqaa
13
vulnerability VCID-ksh8-pazn-dbca
14
vulnerability VCID-mccp-khb9-qkb7
15
vulnerability VCID-rxxr-sseq-k7a9
16
vulnerability VCID-th75-ys47-d3h8
17
vulnerability VCID-u6sd-648r-qbdb
18
vulnerability VCID-vdpf-jddk-syda
19
vulnerability VCID-weqb-fxu4-17e7
20
vulnerability VCID-whgc-pt2s-77ar
21
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.20
1
url pkg:pypi/django@1.6.11
purl pkg:pypi/django@1.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-6wah-r8vr-5qc4
6
vulnerability VCID-8gus-er59-1qak
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-bb8b-hq41-s7a6
9
vulnerability VCID-ga69-9y5g-77c3
10
vulnerability VCID-jfya-694v-myar
11
vulnerability VCID-ksh8-pazn-dbca
12
vulnerability VCID-mccp-khb9-qkb7
13
vulnerability VCID-rxxr-sseq-k7a9
14
vulnerability VCID-u6sd-648r-qbdb
15
vulnerability VCID-vdpf-jddk-syda
16
vulnerability VCID-weqb-fxu4-17e7
17
vulnerability VCID-whgc-pt2s-77ar
18
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.11
2
url pkg:pypi/django@1.7.7
purl pkg:pypi/django@1.7.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-jfya-694v-myar
12
vulnerability VCID-kq8u-td31-uqaa
13
vulnerability VCID-ksh8-pazn-dbca
14
vulnerability VCID-mccp-khb9-qkb7
15
vulnerability VCID-rxxr-sseq-k7a9
16
vulnerability VCID-th75-ys47-d3h8
17
vulnerability VCID-vdpf-jddk-syda
18
vulnerability VCID-weqb-fxu4-17e7
19
vulnerability VCID-whgc-pt2s-77ar
20
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.7
3
url pkg:pypi/django@1.8rc1
purl pkg:pypi/django@1.8rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3kza-a88p-kfg7
1
vulnerability VCID-6w99-8w84-jkh9
2
vulnerability VCID-6wah-r8vr-5qc4
3
vulnerability VCID-8gus-er59-1qak
4
vulnerability VCID-9mpt-zxaw-kkeg
5
vulnerability VCID-ksh8-pazn-dbca
6
vulnerability VCID-vdpf-jddk-syda
7
vulnerability VCID-weqb-fxu4-17e7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8rc1
4
url pkg:pypi/django@1.8c1
purl pkg:pypi/django@1.8c1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6wah-r8vr-5qc4
6
vulnerability VCID-8gus-er59-1qak
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-bb8b-hq41-s7a6
9
vulnerability VCID-c58g-7jpv-t7hc
10
vulnerability VCID-d62f-7csz-fuhm
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-ksh8-pazn-dbca
13
vulnerability VCID-mccp-khb9-qkb7
14
vulnerability VCID-n2eg-vn4k-yycf
15
vulnerability VCID-qy2a-mvpz-q7eh
16
vulnerability VCID-rruq-9scz-vbg8
17
vulnerability VCID-rxxr-sseq-k7a9
18
vulnerability VCID-vdpf-jddk-syda
19
vulnerability VCID-weqb-fxu4-17e7
20
vulnerability VCID-whgc-pt2s-77ar
21
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8c1
aliases CVE-2015-2317, GHSA-7fq8-4pv5-5w5c, PYSEC-2015-9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bahz-gfxv-e3b2
19
url VCID-bb8b-hq41-s7a6
vulnerability_id VCID-bb8b-hq41-s7a6
summary An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-48432.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-48432.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-48432
reference_id
reference_type
scores
0
value 0.00411
scoring_system epss
scoring_elements 0.61803
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-48432
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14232
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14232
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41164
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41164
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43665
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43665
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24680
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24680
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27351
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27351
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39329
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39329
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39330
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39614
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39614
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41989
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41989
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41991
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41991
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42005
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45231
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53907
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53907
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56374
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56374
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13372
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26699
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26699
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32873
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32873
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48432
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48432
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57833
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57833
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59681
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59681
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59682
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59682
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64459
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64459
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64460
25
reference_url https://docs.djangoproject.com/en/dev/releases/security
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/dev/releases/security
26
reference_url https://docs.djangoproject.com/en/dev/releases/security/
reference_id
reference_type
scores
0
value 4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-05T13:20:12Z/
url https://docs.djangoproject.com/en/dev/releases/security/
27
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
28
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
29
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-47.yaml
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-47.yaml
30
reference_url https://groups.google.com/g/django-announce
reference_id
reference_type
scores
0
value 4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-05T13:20:12Z/
url https://groups.google.com/g/django-announce
31
reference_url https://www.djangoproject.com/weblog/2025/jun/04/security-releases
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2025/jun/04/security-releases
32
reference_url https://www.djangoproject.com/weblog/2025/jun/04/security-releases/
reference_id
reference_type
scores
0
value 4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-05T13:20:12Z/
url https://www.djangoproject.com/weblog/2025/jun/04/security-releases/
33
reference_url https://www.djangoproject.com/weblog/2025/jun/10/bugfix-releases
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2025/jun/10/bugfix-releases
34
reference_url http://www.openwall.com/lists/oss-security/2025/06/04/5
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2025/06/04/5
35
reference_url http://www.openwall.com/lists/oss-security/2025/06/10/2
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2025/06/10/2
36
reference_url http://www.openwall.com/lists/oss-security/2025/06/10/3
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2025/06/10/3
37
reference_url http://www.openwall.com/lists/oss-security/2025/06/10/4
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2025/06/10/4
38
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107282
reference_id 1107282
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107282
39
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2370365
reference_id 2370365
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2370365
40
reference_url https://security.archlinux.org/ASA-202506-6
reference_id ASA-202506-6
reference_type
scores
url https://security.archlinux.org/ASA-202506-6
41
reference_url https://security.archlinux.org/AVG-2894
reference_id AVG-2894
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2894
42
reference_url https://www.djangoproject.com/weblog/2025/jun/10/bugfix-releases/
reference_id bugfix-releases
reference_type
scores
0
value 4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-05T13:20:12Z/
url https://www.djangoproject.com/weblog/2025/jun/10/bugfix-releases/
43
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-48432
reference_id CVE-2025-48432
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-48432
44
reference_url https://github.com/advisories/GHSA-7xr5-9hcq-chf9
reference_id GHSA-7xr5-9hcq-chf9
reference_type
scores
url https://github.com/advisories/GHSA-7xr5-9hcq-chf9
45
reference_url https://access.redhat.com/errata/RHSA-2025:14686
reference_id RHSA-2025:14686
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14686
46
reference_url https://access.redhat.com/errata/RHSA-2025:16487
reference_id RHSA-2025:16487
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:16487
47
reference_url https://usn.ubuntu.com/7555-1/
reference_id USN-7555-1
reference_type
scores
url https://usn.ubuntu.com/7555-1/
fixed_packages
0
url pkg:pypi/django@4.2.22
purl pkg:pypi/django@4.2.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4kcg-gx5y-cuaw
1
vulnerability VCID-5xtt-au84-zbb2
2
vulnerability VCID-7c5n-nzwk-v7bz
3
vulnerability VCID-7upw-5p86-8bfr
4
vulnerability VCID-fcg9-xypn-ykhf
5
vulnerability VCID-ga69-9y5g-77c3
6
vulnerability VCID-ga7z-wj4j-63h1
7
vulnerability VCID-jybd-p65h-xffy
8
vulnerability VCID-kxdd-yzp3-r7cb
9
vulnerability VCID-n2v7-jqjy-37bc
10
vulnerability VCID-phkp-9abp-f3dq
11
vulnerability VCID-r1vx-vv7d-gqaj
12
vulnerability VCID-shch-yusm-1uck
13
vulnerability VCID-shjc-2j68-2yfy
14
vulnerability VCID-tktt-vg92-6kae
15
vulnerability VCID-tuqc-c251-h7ds
16
vulnerability VCID-w777-44ns-cybg
17
vulnerability VCID-wa3g-27sx-mbcw
18
vulnerability VCID-whgc-pt2s-77ar
19
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.22
1
url pkg:pypi/django@5.1.10
purl pkg:pypi/django@5.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5xtt-au84-zbb2
1
vulnerability VCID-7c5n-nzwk-v7bz
2
vulnerability VCID-fcg9-xypn-ykhf
3
vulnerability VCID-ga69-9y5g-77c3
4
vulnerability VCID-n2v7-jqjy-37bc
5
vulnerability VCID-whgc-pt2s-77ar
6
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.10
2
url pkg:pypi/django@5.2.2
purl pkg:pypi/django@5.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2as8-7qx6-2kba
1
vulnerability VCID-4gpn-bf2d-ybfb
2
vulnerability VCID-4kcg-gx5y-cuaw
3
vulnerability VCID-55xg-pw9n-zkdy
4
vulnerability VCID-5xtt-au84-zbb2
5
vulnerability VCID-7c5n-nzwk-v7bz
6
vulnerability VCID-7upw-5p86-8bfr
7
vulnerability VCID-abpe-htm1-9ubp
8
vulnerability VCID-eqsc-axng-ckca
9
vulnerability VCID-fcg9-xypn-ykhf
10
vulnerability VCID-fsz5-dkw2-hyap
11
vulnerability VCID-fxuu-kk52-r7ch
12
vulnerability VCID-ga69-9y5g-77c3
13
vulnerability VCID-ga7z-wj4j-63h1
14
vulnerability VCID-jybd-p65h-xffy
15
vulnerability VCID-kxdd-yzp3-r7cb
16
vulnerability VCID-m4am-h2ea-3ffr
17
vulnerability VCID-n2v7-jqjy-37bc
18
vulnerability VCID-phkp-9abp-f3dq
19
vulnerability VCID-r1vx-vv7d-gqaj
20
vulnerability VCID-shch-yusm-1uck
21
vulnerability VCID-shjc-2j68-2yfy
22
vulnerability VCID-tktt-vg92-6kae
23
vulnerability VCID-tuqc-c251-h7ds
24
vulnerability VCID-w777-44ns-cybg
25
vulnerability VCID-wa3g-27sx-mbcw
26
vulnerability VCID-whgc-pt2s-77ar
27
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.2
aliases BIT-django-2025-48432, CVE-2025-48432, GHSA-7xr5-9hcq-chf9, PYSEC-2025-47
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bb8b-hq41-s7a6
20
url VCID-dh12-js4b-h7fw
vulnerability_id VCID-dh12-js4b-h7fw
summary ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.
references
0
reference_url http://advisories.mageia.org/MGASA-2015-0026.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://advisories.mageia.org/MGASA-2015-0026.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html
3
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
5
reference_url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0222.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0222.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-0222
reference_id
reference_type
scores
0
value 0.0429
scoring_system epss
scoring_elements 0.89046
published_at 2026-06-04T12:55:00Z
1
value 0.0429
scoring_system epss
scoring_elements 0.89062
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-0222
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0222
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0222
9
reference_url http://secunia.com/advisories/62285
reference_id
reference_type
scores
url http://secunia.com/advisories/62285
10
reference_url http://secunia.com/advisories/62309
reference_id
reference_type
scores
url http://secunia.com/advisories/62309
11
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
12
reference_url https://github.com/django/django/commit/bcfb47780ce7caecb409a9e9c1c314266e41d392
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/bcfb47780ce7caecb409a9e9c1c314266e41d392
13
reference_url https://github.com/django/django/commit/d7a06ee7e571b6dad07c0f5b519b1db02e2a476c
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/d7a06ee7e571b6dad07c0f5b519b1db02e2a476c
14
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-7.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-7.yaml
15
reference_url https://web.archive.org/web/20161201073154/http://secunia.com/advisories/62285
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20161201073154/http://secunia.com/advisories/62285
16
reference_url https://web.archive.org/web/20161201073337/http://secunia.com/advisories/62309
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20161201073337/http://secunia.com/advisories/62309
17
reference_url https://www.djangoproject.com/weblog/2015/jan/13/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2015/jan/13/security
18
reference_url https://www.djangoproject.com/weblog/2015/jan/13/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/jan/13/security/
19
reference_url http://ubuntu.com/usn/usn-2469-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://ubuntu.com/usn/usn-2469-1
20
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1179685
reference_id 1179685
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1179685
22
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775375
reference_id 775375
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775375
23
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-0222
reference_id CVE-2015-0222
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-0222
24
reference_url https://github.com/advisories/GHSA-6g95-x6cj-mg4v
reference_id GHSA-6g95-x6cj-mg4v
reference_type
scores
url https://github.com/advisories/GHSA-6g95-x6cj-mg4v
25
reference_url https://usn.ubuntu.com/2469-1/
reference_id USN-2469-1
reference_type
scores
url https://usn.ubuntu.com/2469-1/
fixed_packages
0
url pkg:pypi/django@1.4.18
purl pkg:pypi/django@1.4.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-jfya-694v-myar
13
vulnerability VCID-kq8u-td31-uqaa
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-th75-ys47-d3h8
18
vulnerability VCID-u6sd-648r-qbdb
19
vulnerability VCID-vdpf-jddk-syda
20
vulnerability VCID-weqb-fxu4-17e7
21
vulnerability VCID-whgc-pt2s-77ar
22
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.18
1
url pkg:pypi/django@1.6.10
purl pkg:pypi/django@1.6.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-6wah-r8vr-5qc4
6
vulnerability VCID-8gus-er59-1qak
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-bahz-gfxv-e3b2
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-jfya-694v-myar
12
vulnerability VCID-ksh8-pazn-dbca
13
vulnerability VCID-mccp-khb9-qkb7
14
vulnerability VCID-rxxr-sseq-k7a9
15
vulnerability VCID-u6sd-648r-qbdb
16
vulnerability VCID-vacy-878s-3kfb
17
vulnerability VCID-vdpf-jddk-syda
18
vulnerability VCID-weqb-fxu4-17e7
19
vulnerability VCID-whgc-pt2s-77ar
20
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.10
2
url pkg:pypi/django@1.7.3
purl pkg:pypi/django@1.7.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-jfya-694v-myar
13
vulnerability VCID-kq8u-td31-uqaa
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-th75-ys47-d3h8
18
vulnerability VCID-u6sd-648r-qbdb
19
vulnerability VCID-vacy-878s-3kfb
20
vulnerability VCID-vdpf-jddk-syda
21
vulnerability VCID-weqb-fxu4-17e7
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.3
aliases CVE-2015-0222, GHSA-6g95-x6cj-mg4v, PYSEC-2015-7
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dh12-js4b-h7fw
21
url VCID-ffsr-th58-p3ct
vulnerability_id VCID-ffsr-th58-p3ct
summary The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to "MySQL typecasting."
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2014-0456.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0456.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2014-0457.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0457.html
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0474.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0474.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0474
reference_id
reference_type
scores
0
value 0.03963
scoring_system epss
scoring_elements 0.88577
published_at 2026-06-04T12:55:00Z
1
value 0.03963
scoring_system epss
scoring_elements 0.88595
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0474
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730
10
reference_url http://secunia.com/advisories/61281
reference_id
reference_type
scores
url http://secunia.com/advisories/61281
11
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
12
reference_url https://github.com/django/django/commit/5f0829a27e85d89ad8c433f5c6a7a7d17c9e9292
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/5f0829a27e85d89ad8c433f5c6a7a7d17c9e9292
13
reference_url https://github.com/django/django/commit/985434fb1d6bf2335bf96c6ebf91c3674f1f399f
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/985434fb1d6bf2335bf96c6ebf91c3674f1f399f
14
reference_url https://github.com/django/django/commit/aa80f498de6d687e613860933ac58433ab71ea4b
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/aa80f498de6d687e613860933ac58433ab71ea4b
15
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-3.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-3.yaml
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0474
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0474
17
reference_url https://www.djangoproject.com/weblog/2014/apr/21/security
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2014/apr/21/security
18
reference_url https://www.djangoproject.com/weblog/2014/apr/21/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2014/apr/21/security/
19
reference_url http://www.debian.org/security/2014/dsa-2934
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2014/dsa-2934
20
reference_url http://www.ubuntu.com/usn/USN-2169-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2169-1
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1090593
reference_id 1090593
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1090593
22
reference_url https://github.com/advisories/GHSA-wqjj-hx84-v449
reference_id GHSA-wqjj-hx84-v449
reference_type
scores
url https://github.com/advisories/GHSA-wqjj-hx84-v449
23
reference_url https://security.gentoo.org/glsa/201406-26
reference_id GLSA-201406-26
reference_type
scores
url https://security.gentoo.org/glsa/201406-26
24
reference_url https://access.redhat.com/errata/RHSA-2014:0456
reference_id RHSA-2014:0456
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0456
25
reference_url https://access.redhat.com/errata/RHSA-2014:0457
reference_id RHSA-2014:0457
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0457
26
reference_url https://usn.ubuntu.com/2169-1/
reference_id USN-2169-1
reference_type
scores
url https://usn.ubuntu.com/2169-1/
fixed_packages
0
url pkg:pypi/django@1.4.11
purl pkg:pypi/django@1.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-71t1-69yq-c7h6
9
vulnerability VCID-7rz2-nqdn-hycc
10
vulnerability VCID-8gus-er59-1qak
11
vulnerability VCID-8v2c-7739-2ugp
12
vulnerability VCID-912q-3eks-4yfm
13
vulnerability VCID-9bqp-b6rw-mye7
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ga69-9y5g-77c3
19
vulnerability VCID-jfya-694v-myar
20
vulnerability VCID-kq8u-td31-uqaa
21
vulnerability VCID-ksh8-pazn-dbca
22
vulnerability VCID-mccp-khb9-qkb7
23
vulnerability VCID-r7tk-79xy-jkhj
24
vulnerability VCID-rxxr-sseq-k7a9
25
vulnerability VCID-ta66-7qrm-sbhu
26
vulnerability VCID-th75-ys47-d3h8
27
vulnerability VCID-u4a7-uvcb-9kf8
28
vulnerability VCID-u6sd-648r-qbdb
29
vulnerability VCID-vdpf-jddk-syda
30
vulnerability VCID-weqb-fxu4-17e7
31
vulnerability VCID-whgc-pt2s-77ar
32
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.11
1
url pkg:pypi/django@1.5.6
purl pkg:pypi/django@1.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-71t1-69yq-c7h6
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bqp-b6rw-mye7
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-bb8b-hq41-s7a6
16
vulnerability VCID-dh12-js4b-h7fw
17
vulnerability VCID-ga69-9y5g-77c3
18
vulnerability VCID-jfya-694v-myar
19
vulnerability VCID-ksh8-pazn-dbca
20
vulnerability VCID-mccp-khb9-qkb7
21
vulnerability VCID-r7tk-79xy-jkhj
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u6sd-648r-qbdb
26
vulnerability VCID-vdpf-jddk-syda
27
vulnerability VCID-weqb-fxu4-17e7
28
vulnerability VCID-whgc-pt2s-77ar
29
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.6
2
url pkg:pypi/django@1.6.3
purl pkg:pypi/django@1.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-71t1-69yq-c7h6
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bqp-b6rw-mye7
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-bb8b-hq41-s7a6
16
vulnerability VCID-dh12-js4b-h7fw
17
vulnerability VCID-ga69-9y5g-77c3
18
vulnerability VCID-jfya-694v-myar
19
vulnerability VCID-ksh8-pazn-dbca
20
vulnerability VCID-mccp-khb9-qkb7
21
vulnerability VCID-r7tk-79xy-jkhj
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u6sd-648r-qbdb
26
vulnerability VCID-vacy-878s-3kfb
27
vulnerability VCID-vdpf-jddk-syda
28
vulnerability VCID-weqb-fxu4-17e7
29
vulnerability VCID-whgc-pt2s-77ar
30
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.3
aliases CVE-2014-0474, GHSA-wqjj-hx84-v449, PYSEC-2014-3
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ffsr-th58-p3ct
22
url VCID-ga69-9y5g-77c3
vulnerability_id VCID-ga69-9y5g-77c3
summary 
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, and the shortcut `django.shortcuts.redirect`  were subject to a potential  denial-of-service attack via certain inputs with a very large number of Unicode characters.
Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.
Django would like to thank Seokchan Yoon for reporting this issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-64458.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-64458.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-64458
reference_id
reference_type
scores
0
value 0.00026
scoring_system epss
scoring_elements 0.07709
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-64458
2
reference_url https://docs.djangoproject.com/en/dev/releases/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/dev/releases/security
3
reference_url https://docs.djangoproject.com/en/dev/releases/security/
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-05T16:20:23Z/
url https://docs.djangoproject.com/en/dev/releases/security/
4
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
5
reference_url https://github.com/django/django/commit/3790593781d26168e7306b5b2f8ea0309de16242
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/3790593781d26168e7306b5b2f8ea0309de16242
6
reference_url https://github.com/django/django/commit/4f5d904b63751dea9ffc3b0e046404a7fa5881ac
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/4f5d904b63751dea9ffc3b0e046404a7fa5881ac
7
reference_url https://github.com/django/django/commit/6e13348436fccf8f22982921d6a3a3e65c956a9f
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/6e13348436fccf8f22982921d6a3a3e65c956a9f
8
reference_url https://github.com/django/django/commit/770eea38d7a0e9ba9455140b5a9a9e33618226a7
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/770eea38d7a0e9ba9455140b5a9a9e33618226a7
9
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-107.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-107.yaml
10
reference_url https://groups.google.com/g/django-announce
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-05T16:20:23Z/
url https://groups.google.com/g/django-announce
11
reference_url https://www.djangoproject.com/weblog/2025/nov/05/security-releases
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2025/nov/05/security-releases
12
reference_url https://www.djangoproject.com/weblog/2025/nov/05/security-releases/
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-05T16:20:23Z/
url https://www.djangoproject.com/weblog/2025/nov/05/security-releases/
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2412649
reference_id 2412649
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2412649
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-64458
reference_id CVE-2025-64458
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-64458
15
reference_url https://github.com/advisories/GHSA-qw25-v68c-qjf3
reference_id GHSA-qw25-v68c-qjf3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qw25-v68c-qjf3
fixed_packages
0
url pkg:pypi/django@4.2.26
purl pkg:pypi/django@4.2.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4kcg-gx5y-cuaw
1
vulnerability VCID-7c5n-nzwk-v7bz
2
vulnerability VCID-7upw-5p86-8bfr
3
vulnerability VCID-fcg9-xypn-ykhf
4
vulnerability VCID-ga7z-wj4j-63h1
5
vulnerability VCID-jybd-p65h-xffy
6
vulnerability VCID-kxdd-yzp3-r7cb
7
vulnerability VCID-phkp-9abp-f3dq
8
vulnerability VCID-r1vx-vv7d-gqaj
9
vulnerability VCID-shch-yusm-1uck
10
vulnerability VCID-shjc-2j68-2yfy
11
vulnerability VCID-tktt-vg92-6kae
12
vulnerability VCID-tuqc-c251-h7ds
13
vulnerability VCID-w777-44ns-cybg
14
vulnerability VCID-wa3g-27sx-mbcw
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.26
1
url pkg:pypi/django@5.1.14
purl pkg:pypi/django@5.1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7c5n-nzwk-v7bz
1
vulnerability VCID-fcg9-xypn-ykhf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.14
2
url pkg:pypi/django@5.2.8
purl pkg:pypi/django@5.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2as8-7qx6-2kba
1
vulnerability VCID-4gpn-bf2d-ybfb
2
vulnerability VCID-4kcg-gx5y-cuaw
3
vulnerability VCID-55xg-pw9n-zkdy
4
vulnerability VCID-7c5n-nzwk-v7bz
5
vulnerability VCID-7upw-5p86-8bfr
6
vulnerability VCID-abpe-htm1-9ubp
7
vulnerability VCID-eqsc-axng-ckca
8
vulnerability VCID-fcg9-xypn-ykhf
9
vulnerability VCID-fsz5-dkw2-hyap
10
vulnerability VCID-fxuu-kk52-r7ch
11
vulnerability VCID-ga7z-wj4j-63h1
12
vulnerability VCID-jybd-p65h-xffy
13
vulnerability VCID-kxdd-yzp3-r7cb
14
vulnerability VCID-m4am-h2ea-3ffr
15
vulnerability VCID-phkp-9abp-f3dq
16
vulnerability VCID-r1vx-vv7d-gqaj
17
vulnerability VCID-shch-yusm-1uck
18
vulnerability VCID-shjc-2j68-2yfy
19
vulnerability VCID-tktt-vg92-6kae
20
vulnerability VCID-tuqc-c251-h7ds
21
vulnerability VCID-w777-44ns-cybg
22
vulnerability VCID-wa3g-27sx-mbcw
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.8
3
url pkg:pypi/django@6.0a1
purl pkg:pypi/django@6.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4kcg-gx5y-cuaw
1
vulnerability VCID-jybd-p65h-xffy
2
vulnerability VCID-r1vx-vv7d-gqaj
3
vulnerability VCID-shch-yusm-1uck
4
vulnerability VCID-shjc-2j68-2yfy
5
vulnerability VCID-wa3g-27sx-mbcw
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@6.0a1
aliases BIT-django-2025-64458, CVE-2025-64458, GHSA-qw25-v68c-qjf3, PYSEC-2025-107
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ga69-9y5g-77c3
23
url VCID-jfya-694v-myar
vulnerability_id VCID-jfya-694v-myar
summary The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html
1
reference_url http://lists.opensuse.org/opensuse-updates/2015-10/msg00043.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-10/msg00043.html
2
reference_url http://lists.opensuse.org/opensuse-updates/2015-10/msg00046.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-10/msg00046.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2015-1678.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-1678.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2015-1686.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-1686.html
5
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5143.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5143.json
6
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5143
reference_id
reference_type
scores
0
value 0.15813
scoring_system epss
scoring_elements 0.94869
published_at 2026-06-05T12:55:00Z
1
value 0.15813
scoring_system epss
scoring_elements 0.94861
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5143
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5143
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5144
9
reference_url https://github.com/advisories/GHSA-h582-2pch-3xv3
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-h582-2pch-3xv3
10
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
11
reference_url https://github.com/django/django/commit/1828f4341ec53a8684112d24031b767eba557663
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/1828f4341ec53a8684112d24031b767eba557663
12
reference_url https://github.com/django/django/commit/2e47f3e401c29bc2ba5ab794d483cb0820855fb9
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/2e47f3e401c29bc2ba5ab794d483cb0820855fb9
13
reference_url https://github.com/django/django/commit/66d12d1ababa8f062857ee5eb43276493720bf16
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/66d12d1ababa8f062857ee5eb43276493720bf16
14
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-20.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-20.yaml
15
reference_url https://security.gentoo.org/glsa/201510-06
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/201510-06
16
reference_url https://www.djangoproject.com/weblog/2015/jul/08/security-releases
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2015/jul/08/security-releases
17
reference_url https://www.djangoproject.com/weblog/2015/jul/08/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/jul/08/security-releases/
18
reference_url http://www.debian.org/security/2015/dsa-3305
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2015/dsa-3305
19
reference_url http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
20
reference_url http://www.securityfocus.com/bid/75666
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/75666
21
reference_url http://www.securitytracker.com/id/1032820
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1032820
22
reference_url http://www.ubuntu.com/usn/USN-2671-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2671-1
23
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1239010
reference_id 1239010
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1239010
24
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-5143
reference_id CVE-2015-5143
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-5143
25
reference_url https://access.redhat.com/errata/RHSA-2015:1678
reference_id RHSA-2015:1678
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1678
26
reference_url https://access.redhat.com/errata/RHSA-2015:1686
reference_id RHSA-2015:1686
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1686
27
reference_url https://usn.ubuntu.com/2671-1/
reference_id USN-2671-1
reference_type
scores
url https://usn.ubuntu.com/2671-1/
fixed_packages
0
url pkg:pypi/django@1.4.21
purl pkg:pypi/django@1.4.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-kq8u-td31-uqaa
12
vulnerability VCID-ksh8-pazn-dbca
13
vulnerability VCID-rxxr-sseq-k7a9
14
vulnerability VCID-th75-ys47-d3h8
15
vulnerability VCID-u6sd-648r-qbdb
16
vulnerability VCID-vdpf-jddk-syda
17
vulnerability VCID-weqb-fxu4-17e7
18
vulnerability VCID-whgc-pt2s-77ar
19
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.21
1
url pkg:pypi/django@1.7.9
purl pkg:pypi/django@1.7.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-kq8u-td31-uqaa
12
vulnerability VCID-ksh8-pazn-dbca
13
vulnerability VCID-rxxr-sseq-k7a9
14
vulnerability VCID-th75-ys47-d3h8
15
vulnerability VCID-vdpf-jddk-syda
16
vulnerability VCID-weqb-fxu4-17e7
17
vulnerability VCID-whgc-pt2s-77ar
18
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.9
2
url pkg:pypi/django@1.8.3
purl pkg:pypi/django@1.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-c58g-7jpv-t7hc
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-kq8u-td31-uqaa
13
vulnerability VCID-ksh8-pazn-dbca
14
vulnerability VCID-qy2a-mvpz-q7eh
15
vulnerability VCID-rruq-9scz-vbg8
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-upbz-vg19-rugv
18
vulnerability VCID-vdpf-jddk-syda
19
vulnerability VCID-weqb-fxu4-17e7
20
vulnerability VCID-whgc-pt2s-77ar
21
vulnerability VCID-x61x-6b6k-h3bn
22
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.3
aliases CVE-2015-5143, GHSA-h582-2pch-3xv3, PYSEC-2015-20
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jfya-694v-myar
24
url VCID-ksh8-pazn-dbca
vulnerability_id VCID-ksh8-pazn-dbca
summary The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2016-0502.html
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0502.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2016-0504.html
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0504.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2016-0505.html
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0505.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2016-0506.html
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0506.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2512.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2512.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-2512
reference_id
reference_type
scores
0
value 0.01203
scoring_system epss
scoring_elements 0.79267
published_at 2026-06-04T12:55:00Z
1
value 0.01203
scoring_system epss
scoring_elements 0.79293
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-2512
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2512
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2512
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2513
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2513
8
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
9
reference_url https://github.com/django/django/commit/382ab137312961ad62feb8109d70a5a581fe8350
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/382ab137312961ad62feb8109d70a5a581fe8350
10
reference_url https://github.com/django/django/commit/c5544d289233f501917e25970c03ed444abbd4f0
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/c5544d289233f501917e25970c03ed444abbd4f0
11
reference_url https://github.com/django/django/commit/fc6d147a63f89795dbcdecb0559256470fff4380
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/fc6d147a63f89795dbcdecb0559256470fff4380
12
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-15.yaml
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-15.yaml
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-2512
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-2512
14
reference_url https://web.archive.org/web/20210123090815/http://www.securityfocus.com/bid/83879
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210123090815/http://www.securityfocus.com/bid/83879
15
reference_url https://web.archive.org/web/20210413200202/http://www.securitytracker.com/id/1035152
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210413200202/http://www.securitytracker.com/id/1035152
16
reference_url https://www.djangoproject.com/weblog/2016/mar/01/security-releases
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2016/mar/01/security-releases
17
reference_url https://www.djangoproject.com/weblog/2016/mar/01/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2016/mar/01/security-releases/
18
reference_url http://www.debian.org/security/2016/dsa-3544
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3544
19
reference_url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
20
reference_url http://www.securityfocus.com/bid/83879
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/83879
21
reference_url http://www.securitytracker.com/id/1035152
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1035152
22
reference_url http://www.ubuntu.com/usn/USN-2915-1
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2915-1
23
reference_url http://www.ubuntu.com/usn/USN-2915-2
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2915-2
24
reference_url http://www.ubuntu.com/usn/USN-2915-3
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2915-3
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1311431
reference_id 1311431
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1311431
26
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816434
reference_id 816434
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816434
27
reference_url https://github.com/advisories/GHSA-pw27-w7w4-9qc7
reference_id GHSA-pw27-w7w4-9qc7
reference_type
scores
url https://github.com/advisories/GHSA-pw27-w7w4-9qc7
28
reference_url https://access.redhat.com/errata/RHSA-2016:0502
reference_id RHSA-2016:0502
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0502
29
reference_url https://access.redhat.com/errata/RHSA-2016:0503
reference_id RHSA-2016:0503
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0503
30
reference_url https://access.redhat.com/errata/RHSA-2016:0504
reference_id RHSA-2016:0504
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0504
31
reference_url https://access.redhat.com/errata/RHSA-2016:0505
reference_id RHSA-2016:0505
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0505
32
reference_url https://access.redhat.com/errata/RHSA-2016:0506
reference_id RHSA-2016:0506
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0506
33
reference_url https://usn.ubuntu.com/2915-1/
reference_id USN-2915-1
reference_type
scores
url https://usn.ubuntu.com/2915-1/
fixed_packages
0
url pkg:pypi/django@1.8.10
purl pkg:pypi/django@1.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-8gus-er59-1qak
6
vulnerability VCID-9mpt-zxaw-kkeg
7
vulnerability VCID-bb8b-hq41-s7a6
8
vulnerability VCID-c58g-7jpv-t7hc
9
vulnerability VCID-ga69-9y5g-77c3
10
vulnerability VCID-qy2a-mvpz-q7eh
11
vulnerability VCID-rruq-9scz-vbg8
12
vulnerability VCID-upbz-vg19-rugv
13
vulnerability VCID-vdpf-jddk-syda
14
vulnerability VCID-weqb-fxu4-17e7
15
vulnerability VCID-whgc-pt2s-77ar
16
vulnerability VCID-x61x-6b6k-h3bn
17
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.10
1
url pkg:pypi/django@1.9.3
purl pkg:pypi/django@1.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-8gus-er59-1qak
6
vulnerability VCID-9mpt-zxaw-kkeg
7
vulnerability VCID-bb8b-hq41-s7a6
8
vulnerability VCID-ga69-9y5g-77c3
9
vulnerability VCID-qy2a-mvpz-q7eh
10
vulnerability VCID-rruq-9scz-vbg8
11
vulnerability VCID-upbz-vg19-rugv
12
vulnerability VCID-vdpf-jddk-syda
13
vulnerability VCID-weqb-fxu4-17e7
14
vulnerability VCID-whgc-pt2s-77ar
15
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.3
aliases CVE-2016-2512, GHSA-pw27-w7w4-9qc7, PYSEC-2016-15
risk_score 3.4
exploitability 0.5
weighted_severity 6.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ksh8-pazn-dbca
25
url VCID-mccp-khb9-qkb7
vulnerability_id VCID-mccp-khb9-qkb7
summary Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html
1
reference_url http://lists.opensuse.org/opensuse-updates/2015-10/msg00043.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-10/msg00043.html
2
reference_url http://lists.opensuse.org/opensuse-updates/2015-10/msg00046.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-10/msg00046.html
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5144.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5144.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5144
reference_id
reference_type
scores
0
value 0.01493
scoring_system epss
scoring_elements 0.81399
published_at 2026-06-04T12:55:00Z
1
value 0.01493
scoring_system epss
scoring_elements 0.81427
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5144
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5143
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5144
7
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
8
reference_url https://github.com/django/django/blob/4555a823fd57e261e1b19c778429473256c8ea08/docs/releases/1.4.21.txt#L30-L54
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/blob/4555a823fd57e261e1b19c778429473256c8ea08/docs/releases/1.4.21.txt#L30-L54
9
reference_url https://github.com/django/django/commit/1ba1cdce7d58e6740fe51955d945b56ae51d072a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/1ba1cdce7d58e6740fe51955d945b56ae51d072a
10
reference_url https://github.com/django/django/commit/574dd5e0b0fbb877ae5827b1603d298edc9bb2a0
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/574dd5e0b0fbb877ae5827b1603d298edc9bb2a0
11
reference_url https://github.com/django/django/commit/8f9a4d3a2bc42f14bb437defd30c7315adbff22c
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/8f9a4d3a2bc42f14bb437defd30c7315adbff22c
12
reference_url https://github.com/django/django/commit/ae49b4d994656bc037513dcd064cb9ce5bb85649
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/ae49b4d994656bc037513dcd064cb9ce5bb85649
13
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-10.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-10.yaml
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-5144
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-5144
15
reference_url https://security.gentoo.org/glsa/201510-06
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/201510-06
16
reference_url https://web.archive.org/web/20150924150801/http://www.securitytracker.com/id/1032820
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150924150801/http://www.securitytracker.com/id/1032820
17
reference_url https://web.archive.org/web/20200228050526/http://www.securityfocus.com/bid/75665
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200228050526/http://www.securityfocus.com/bid/75665
18
reference_url https://www.djangoproject.com/weblog/2015/jul/08/security-releases
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2015/jul/08/security-releases
19
reference_url https://www.djangoproject.com/weblog/2015/jul/08/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/jul/08/security-releases/
20
reference_url http://www.debian.org/security/2015/dsa-3305
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2015/dsa-3305
21
reference_url http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
22
reference_url http://www.securityfocus.com/bid/75665
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/75665
23
reference_url http://www.securitytracker.com/id/1032820
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1032820
24
reference_url http://www.ubuntu.com/usn/USN-2671-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2671-1
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1239011
reference_id 1239011
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1239011
26
reference_url https://github.com/advisories/GHSA-q5qw-4364-5hhm
reference_id GHSA-q5qw-4364-5hhm
reference_type
scores
url https://github.com/advisories/GHSA-q5qw-4364-5hhm
27
reference_url https://usn.ubuntu.com/2671-1/
reference_id USN-2671-1
reference_type
scores
url https://usn.ubuntu.com/2671-1/
fixed_packages
0
url pkg:pypi/django@1.4.21
purl pkg:pypi/django@1.4.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-kq8u-td31-uqaa
12
vulnerability VCID-ksh8-pazn-dbca
13
vulnerability VCID-rxxr-sseq-k7a9
14
vulnerability VCID-th75-ys47-d3h8
15
vulnerability VCID-u6sd-648r-qbdb
16
vulnerability VCID-vdpf-jddk-syda
17
vulnerability VCID-weqb-fxu4-17e7
18
vulnerability VCID-whgc-pt2s-77ar
19
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.21
1
url pkg:pypi/django@1.7.9
purl pkg:pypi/django@1.7.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-kq8u-td31-uqaa
12
vulnerability VCID-ksh8-pazn-dbca
13
vulnerability VCID-rxxr-sseq-k7a9
14
vulnerability VCID-th75-ys47-d3h8
15
vulnerability VCID-vdpf-jddk-syda
16
vulnerability VCID-weqb-fxu4-17e7
17
vulnerability VCID-whgc-pt2s-77ar
18
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.9
2
url pkg:pypi/django@1.8.3
purl pkg:pypi/django@1.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-c58g-7jpv-t7hc
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-kq8u-td31-uqaa
13
vulnerability VCID-ksh8-pazn-dbca
14
vulnerability VCID-qy2a-mvpz-q7eh
15
vulnerability VCID-rruq-9scz-vbg8
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-upbz-vg19-rugv
18
vulnerability VCID-vdpf-jddk-syda
19
vulnerability VCID-weqb-fxu4-17e7
20
vulnerability VCID-whgc-pt2s-77ar
21
vulnerability VCID-x61x-6b6k-h3bn
22
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.3
aliases CVE-2015-5144, GHSA-q5qw-4364-5hhm, PYSEC-2015-10
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mccp-khb9-qkb7
26
url VCID-r7tk-79xy-jkhj
vulnerability_id VCID-r7tk-79xy-jkhj
summary The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0481.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0481.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0481
reference_id
reference_type
scores
0
value 0.01121
scoring_system epss
scoring_elements 0.7861
published_at 2026-06-05T12:55:00Z
1
value 0.01121
scoring_system epss
scoring_elements 0.78582
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0481
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
7
reference_url http://secunia.com/advisories/59782
reference_id
reference_type
scores
url http://secunia.com/advisories/59782
8
reference_url http://secunia.com/advisories/61276
reference_id
reference_type
scores
url http://secunia.com/advisories/61276
9
reference_url http://secunia.com/advisories/61281
reference_id
reference_type
scores
url http://secunia.com/advisories/61281
10
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
11
reference_url https://github.com/django/django/commit/26cd48e166ac4d84317c8ee6d63ac52a87e8da99
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/26cd48e166ac4d84317c8ee6d63ac52a87e8da99
12
reference_url https://github.com/django/django/commit/30042d475bf084c6723c6217a21598d9247a9c41
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/30042d475bf084c6723c6217a21598d9247a9c41
13
reference_url https://github.com/django/django/commit/dd0c3f4ee1a30c1a1e6055061c6ba6e58c6b54d1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/dd0c3f4ee1a30c1a1e6055061c6ba6e58c6b54d1
14
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-5.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-5.yaml
15
reference_url https://www.djangoproject.com/weblog/2014/aug/20/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2014/aug/20/security
16
reference_url https://www.djangoproject.com/weblog/2014/aug/20/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2014/aug/20/security/
17
reference_url http://www.debian.org/security/2014/dsa-3010
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2014/dsa-3010
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1129952
reference_id 1129952
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1129952
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0481
reference_id CVE-2014-0481
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0481
20
reference_url https://github.com/advisories/GHSA-296w-6qhq-gf92
reference_id GHSA-296w-6qhq-gf92
reference_type
scores
url https://github.com/advisories/GHSA-296w-6qhq-gf92
21
reference_url https://security.gentoo.org/glsa/201412-22
reference_id GLSA-201412-22
reference_type
scores
url https://security.gentoo.org/glsa/201412-22
22
reference_url https://usn.ubuntu.com/2347-1/
reference_id USN-2347-1
reference_type
scores
url https://usn.ubuntu.com/2347-1/
fixed_packages
0
url pkg:pypi/django@1.4.14
purl pkg:pypi/django@1.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-8gus-er59-1qak
9
vulnerability VCID-912q-3eks-4yfm
10
vulnerability VCID-9mpt-zxaw-kkeg
11
vulnerability VCID-bahz-gfxv-e3b2
12
vulnerability VCID-bb8b-hq41-s7a6
13
vulnerability VCID-dh12-js4b-h7fw
14
vulnerability VCID-ga69-9y5g-77c3
15
vulnerability VCID-jfya-694v-myar
16
vulnerability VCID-kq8u-td31-uqaa
17
vulnerability VCID-ksh8-pazn-dbca
18
vulnerability VCID-mccp-khb9-qkb7
19
vulnerability VCID-rxxr-sseq-k7a9
20
vulnerability VCID-ta66-7qrm-sbhu
21
vulnerability VCID-th75-ys47-d3h8
22
vulnerability VCID-u6sd-648r-qbdb
23
vulnerability VCID-vdpf-jddk-syda
24
vulnerability VCID-weqb-fxu4-17e7
25
vulnerability VCID-whgc-pt2s-77ar
26
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.14
1
url pkg:pypi/django@1.5.9
purl pkg:pypi/django@1.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-912q-3eks-4yfm
9
vulnerability VCID-9mpt-zxaw-kkeg
10
vulnerability VCID-bahz-gfxv-e3b2
11
vulnerability VCID-bb8b-hq41-s7a6
12
vulnerability VCID-dh12-js4b-h7fw
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-jfya-694v-myar
15
vulnerability VCID-ksh8-pazn-dbca
16
vulnerability VCID-mccp-khb9-qkb7
17
vulnerability VCID-rxxr-sseq-k7a9
18
vulnerability VCID-ta66-7qrm-sbhu
19
vulnerability VCID-u6sd-648r-qbdb
20
vulnerability VCID-vdpf-jddk-syda
21
vulnerability VCID-weqb-fxu4-17e7
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.9
2
url pkg:pypi/django@1.6.6
purl pkg:pypi/django@1.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-912q-3eks-4yfm
9
vulnerability VCID-9mpt-zxaw-kkeg
10
vulnerability VCID-bahz-gfxv-e3b2
11
vulnerability VCID-bb8b-hq41-s7a6
12
vulnerability VCID-dh12-js4b-h7fw
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-jfya-694v-myar
15
vulnerability VCID-ksh8-pazn-dbca
16
vulnerability VCID-mccp-khb9-qkb7
17
vulnerability VCID-rxxr-sseq-k7a9
18
vulnerability VCID-ta66-7qrm-sbhu
19
vulnerability VCID-u6sd-648r-qbdb
20
vulnerability VCID-vacy-878s-3kfb
21
vulnerability VCID-vdpf-jddk-syda
22
vulnerability VCID-weqb-fxu4-17e7
23
vulnerability VCID-whgc-pt2s-77ar
24
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.6
aliases CVE-2014-0481, GHSA-296w-6qhq-gf92, PYSEC-2014-5
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r7tk-79xy-jkhj
27
url VCID-rq19-9v21-47dy
vulnerability_id VCID-rq19-9v21-47dy
summary The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2014-0456.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0456.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2014-0457.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0457.html
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0472.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0472.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0472
reference_id
reference_type
scores
0
value 0.06894
scoring_system epss
scoring_elements 0.91555
published_at 2026-06-05T12:55:00Z
1
value 0.06894
scoring_system epss
scoring_elements 0.91542
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0472
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730
10
reference_url http://secunia.com/advisories/61281
reference_id
reference_type
scores
url http://secunia.com/advisories/61281
11
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
12
reference_url https://github.com/django/django/commit/2a5bcb69f42b84464b24b5c835dca6467b6aa7f1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/2a5bcb69f42b84464b24b5c835dca6467b6aa7f1
13
reference_url https://github.com/django/django/commit/4352a50871e239ebcdf64eee6f0b88e714015c1b
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/4352a50871e239ebcdf64eee6f0b88e714015c1b
14
reference_url https://github.com/django/django/commit/c1a8c420fe4b27fb2caf5e46d23b5712fc0ac535
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/c1a8c420fe4b27fb2caf5e46d23b5712fc0ac535
15
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-1.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-1.yaml
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0472
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0472
17
reference_url https://www.djangoproject.com/weblog/2014/apr/21/security
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2014/apr/21/security
18
reference_url https://www.djangoproject.com/weblog/2014/apr/21/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2014/apr/21/security/
19
reference_url http://www.debian.org/security/2014/dsa-2934
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2014/dsa-2934
20
reference_url http://www.ubuntu.com/usn/USN-2169-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2169-1
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1090588
reference_id 1090588
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1090588
22
reference_url https://github.com/advisories/GHSA-rvq6-mrpv-m6rm
reference_id GHSA-rvq6-mrpv-m6rm
reference_type
scores
url https://github.com/advisories/GHSA-rvq6-mrpv-m6rm
23
reference_url https://security.gentoo.org/glsa/201406-26
reference_id GLSA-201406-26
reference_type
scores
url https://security.gentoo.org/glsa/201406-26
24
reference_url https://access.redhat.com/errata/RHSA-2014:0456
reference_id RHSA-2014:0456
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0456
25
reference_url https://access.redhat.com/errata/RHSA-2014:0457
reference_id RHSA-2014:0457
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0457
26
reference_url https://usn.ubuntu.com/2169-1/
reference_id USN-2169-1
reference_type
scores
url https://usn.ubuntu.com/2169-1/
fixed_packages
0
url pkg:pypi/django@1.4.11
purl pkg:pypi/django@1.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-71t1-69yq-c7h6
9
vulnerability VCID-7rz2-nqdn-hycc
10
vulnerability VCID-8gus-er59-1qak
11
vulnerability VCID-8v2c-7739-2ugp
12
vulnerability VCID-912q-3eks-4yfm
13
vulnerability VCID-9bqp-b6rw-mye7
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ga69-9y5g-77c3
19
vulnerability VCID-jfya-694v-myar
20
vulnerability VCID-kq8u-td31-uqaa
21
vulnerability VCID-ksh8-pazn-dbca
22
vulnerability VCID-mccp-khb9-qkb7
23
vulnerability VCID-r7tk-79xy-jkhj
24
vulnerability VCID-rxxr-sseq-k7a9
25
vulnerability VCID-ta66-7qrm-sbhu
26
vulnerability VCID-th75-ys47-d3h8
27
vulnerability VCID-u4a7-uvcb-9kf8
28
vulnerability VCID-u6sd-648r-qbdb
29
vulnerability VCID-vdpf-jddk-syda
30
vulnerability VCID-weqb-fxu4-17e7
31
vulnerability VCID-whgc-pt2s-77ar
32
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.11
1
url pkg:pypi/django@1.5.6
purl pkg:pypi/django@1.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-71t1-69yq-c7h6
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bqp-b6rw-mye7
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-bb8b-hq41-s7a6
16
vulnerability VCID-dh12-js4b-h7fw
17
vulnerability VCID-ga69-9y5g-77c3
18
vulnerability VCID-jfya-694v-myar
19
vulnerability VCID-ksh8-pazn-dbca
20
vulnerability VCID-mccp-khb9-qkb7
21
vulnerability VCID-r7tk-79xy-jkhj
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u6sd-648r-qbdb
26
vulnerability VCID-vdpf-jddk-syda
27
vulnerability VCID-weqb-fxu4-17e7
28
vulnerability VCID-whgc-pt2s-77ar
29
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.6
2
url pkg:pypi/django@1.6.3
purl pkg:pypi/django@1.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-71t1-69yq-c7h6
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bqp-b6rw-mye7
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-bb8b-hq41-s7a6
16
vulnerability VCID-dh12-js4b-h7fw
17
vulnerability VCID-ga69-9y5g-77c3
18
vulnerability VCID-jfya-694v-myar
19
vulnerability VCID-ksh8-pazn-dbca
20
vulnerability VCID-mccp-khb9-qkb7
21
vulnerability VCID-r7tk-79xy-jkhj
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u6sd-648r-qbdb
26
vulnerability VCID-vacy-878s-3kfb
27
vulnerability VCID-vdpf-jddk-syda
28
vulnerability VCID-weqb-fxu4-17e7
29
vulnerability VCID-whgc-pt2s-77ar
30
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.3
aliases CVE-2014-0472, GHSA-rvq6-mrpv-m6rm, PYSEC-2014-1
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rq19-9v21-47dy
28
url VCID-rxxr-sseq-k7a9
vulnerability_id VCID-rxxr-sseq-k7a9
summary The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173375.html
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173375.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174770.html
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174770.html
2
reference_url http://lists.opensuse.org/opensuse-updates/2015-12/msg00014.html
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-12/msg00014.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2015-12/msg00017.html
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-12/msg00017.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2016-0129.html
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0129.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2016-0156.html
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0156.html
6
reference_url http://rhn.redhat.com/errata/RHSA-2016-0157.html
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0157.html
7
reference_url http://rhn.redhat.com/errata/RHSA-2016-0158.html
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0158.html
8
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8213.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8213.json
9
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8213
reference_id
reference_type
scores
0
value 0.02966
scoring_system epss
scoring_elements 0.86775
published_at 2026-06-05T12:55:00Z
1
value 0.03006
scoring_system epss
scoring_elements 0.86833
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8213
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8213
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8213
11
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
12
reference_url https://github.com/django/django/commit/316bc3fc9437c5960c24baceb93c73f1939711e4
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/316bc3fc9437c5960c24baceb93c73f1939711e4
13
reference_url https://github.com/django/django/commit/3ebbda0aef9e7a90ac6208bb8f9bc21228e2c7da
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/3ebbda0aef9e7a90ac6208bb8f9bc21228e2c7da
14
reference_url https://github.com/django/django/commit/8a01c6b53169ee079cb21ac5919fdafcc8c5e172
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/8a01c6b53169ee079cb21ac5919fdafcc8c5e172
15
reference_url https://github.com/django/django/commit/9f83fc2f66f5a0bac7c291aec55df66050bb6991
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/9f83fc2f66f5a0bac7c291aec55df66050bb6991
16
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-11.yaml
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-11.yaml
17
reference_url https://www.djangoproject.com/weblog/2015/nov/24/security-releases-issued
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2015/nov/24/security-releases-issued
18
reference_url https://www.djangoproject.com/weblog/2015/nov/24/security-releases-issued/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/nov/24/security-releases-issued/
19
reference_url http://www.debian.org/security/2015/dsa-3404
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2015/dsa-3404
20
reference_url http://www.securityfocus.com/bid/77750
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/77750
21
reference_url http://www.securitytracker.com/id/1034237
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1034237
22
reference_url http://www.ubuntu.com/usn/USN-2816-1
reference_id
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2816-1
23
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1283553
reference_id 1283553
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1283553
24
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8213
reference_id CVE-2015-8213
reference_type
scores
0
value 2.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-8213
25
reference_url https://github.com/advisories/GHSA-6wcr-wcqm-3mfh
reference_id GHSA-6wcr-wcqm-3mfh
reference_type
scores
url https://github.com/advisories/GHSA-6wcr-wcqm-3mfh
26
reference_url https://access.redhat.com/errata/RHSA-2016:0129
reference_id RHSA-2016:0129
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0129
27
reference_url https://access.redhat.com/errata/RHSA-2016:0156
reference_id RHSA-2016:0156
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0156
28
reference_url https://access.redhat.com/errata/RHSA-2016:0157
reference_id RHSA-2016:0157
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0157
29
reference_url https://access.redhat.com/errata/RHSA-2016:0158
reference_id RHSA-2016:0158
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0158
30
reference_url https://access.redhat.com/errata/RHSA-2016:0360
reference_id RHSA-2016:0360
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0360
31
reference_url https://usn.ubuntu.com/2816-1/
reference_id USN-2816-1
reference_type
scores
url https://usn.ubuntu.com/2816-1/
fixed_packages
0
url pkg:pypi/django@1.7.11
purl pkg:pypi/django@1.7.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-6wah-r8vr-5qc4
6
vulnerability VCID-8gus-er59-1qak
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-bb8b-hq41-s7a6
9
vulnerability VCID-ga69-9y5g-77c3
10
vulnerability VCID-ksh8-pazn-dbca
11
vulnerability VCID-vdpf-jddk-syda
12
vulnerability VCID-weqb-fxu4-17e7
13
vulnerability VCID-whgc-pt2s-77ar
14
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.11
1
url pkg:pypi/django@1.8.7
purl pkg:pypi/django@1.8.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-6wah-r8vr-5qc4
6
vulnerability VCID-8gus-er59-1qak
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-bb8b-hq41-s7a6
9
vulnerability VCID-c58g-7jpv-t7hc
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-ksh8-pazn-dbca
12
vulnerability VCID-qy2a-mvpz-q7eh
13
vulnerability VCID-rruq-9scz-vbg8
14
vulnerability VCID-upbz-vg19-rugv
15
vulnerability VCID-vdpf-jddk-syda
16
vulnerability VCID-weqb-fxu4-17e7
17
vulnerability VCID-whgc-pt2s-77ar
18
vulnerability VCID-x61x-6b6k-h3bn
19
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.7
2
url pkg:pypi/django@1.9rc2
purl pkg:pypi/django@1.9rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-6w99-8w84-jkh9
4
vulnerability VCID-8gus-er59-1qak
5
vulnerability VCID-9mpt-zxaw-kkeg
6
vulnerability VCID-bb8b-hq41-s7a6
7
vulnerability VCID-ga69-9y5g-77c3
8
vulnerability VCID-ksh8-pazn-dbca
9
vulnerability VCID-qy2a-mvpz-q7eh
10
vulnerability VCID-rruq-9scz-vbg8
11
vulnerability VCID-vdpf-jddk-syda
12
vulnerability VCID-whgc-pt2s-77ar
13
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9rc2
aliases CVE-2015-8213, GHSA-6wcr-wcqm-3mfh, PYSEC-2015-11
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rxxr-sseq-k7a9
29
url VCID-ta66-7qrm-sbhu
vulnerability_id VCID-ta66-7qrm-sbhu
summary The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.
references
0
reference_url http://advisories.mageia.org/MGASA-2015-0026.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://advisories.mageia.org/MGASA-2015-0026.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html
3
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html
5
reference_url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0221.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0221.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-0221
reference_id
reference_type
scores
0
value 0.07842
scoring_system epss
scoring_elements 0.92136
published_at 2026-06-04T12:55:00Z
1
value 0.07842
scoring_system epss
scoring_elements 0.92149
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-0221
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0219
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0219
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0220
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0220
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0221
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0221
11
reference_url http://secunia.com/advisories/62285
reference_id
reference_type
scores
url http://secunia.com/advisories/62285
12
reference_url http://secunia.com/advisories/62309
reference_id
reference_type
scores
url http://secunia.com/advisories/62309
13
reference_url http://secunia.com/advisories/62718
reference_id
reference_type
scores
url http://secunia.com/advisories/62718
14
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
15
reference_url https://github.com/django/django/blob/9b9c805cedb08621bd5dc58a01a6478eb7cc49a9/docs/releases/1.4.18.txt#L48C1-L49C1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/blob/9b9c805cedb08621bd5dc58a01a6478eb7cc49a9/docs/releases/1.4.18.txt#L48C1-L49C1
16
reference_url https://github.com/django/django/commit/553779c4055e8742cc832ed525b9ee34b174934f
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/553779c4055e8742cc832ed525b9ee34b174934f
17
reference_url https://github.com/django/django/commit/818e59a3f0fbadf6c447754d202d88df025f8f2a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/818e59a3f0fbadf6c447754d202d88df025f8f2a
18
reference_url https://github.com/django/django/commit/d020da6646c5142bc092247d218a3d1ce3e993f7
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/d020da6646c5142bc092247d218a3d1ce3e993f7
19
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-6.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-6.yaml
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-0221
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-0221
21
reference_url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62285
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62285
22
reference_url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62309
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150128111656/http://secunia.com/advisories/62309
23
reference_url https://web.archive.org/web/20150523054951/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:109/?name=MDVSA-2015:109
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150523054951/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:109/?name=MDVSA-2015:109
24
reference_url https://web.archive.org/web/20150523054953/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:036/?name=MDVSA-2015:036
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150523054953/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:036/?name=MDVSA-2015:036
25
reference_url https://web.archive.org/web/20151104201446/http://secunia.com/advisories/62718
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20151104201446/http://secunia.com/advisories/62718
26
reference_url https://www.djangoproject.com/weblog/2015/jan/13/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2015/jan/13/security
27
reference_url https://www.djangoproject.com/weblog/2015/jan/13/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/jan/13/security/
28
reference_url http://ubuntu.com/usn/usn-2469-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://ubuntu.com/usn/usn-2469-1
29
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:036
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:036
30
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
31
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1179679
reference_id 1179679
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1179679
32
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775375
reference_id 775375
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775375
33
reference_url https://github.com/advisories/GHSA-jhjg-w2cp-5j44
reference_id GHSA-jhjg-w2cp-5j44
reference_type
scores
url https://github.com/advisories/GHSA-jhjg-w2cp-5j44
34
reference_url https://usn.ubuntu.com/2469-1/
reference_id USN-2469-1
reference_type
scores
url https://usn.ubuntu.com/2469-1/
fixed_packages
0
url pkg:pypi/django@1.4.18
purl pkg:pypi/django@1.4.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-jfya-694v-myar
13
vulnerability VCID-kq8u-td31-uqaa
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-th75-ys47-d3h8
18
vulnerability VCID-u6sd-648r-qbdb
19
vulnerability VCID-vdpf-jddk-syda
20
vulnerability VCID-weqb-fxu4-17e7
21
vulnerability VCID-whgc-pt2s-77ar
22
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.18
1
url pkg:pypi/django@1.6.10
purl pkg:pypi/django@1.6.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-6w99-8w84-jkh9
5
vulnerability VCID-6wah-r8vr-5qc4
6
vulnerability VCID-8gus-er59-1qak
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-bahz-gfxv-e3b2
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-ga69-9y5g-77c3
11
vulnerability VCID-jfya-694v-myar
12
vulnerability VCID-ksh8-pazn-dbca
13
vulnerability VCID-mccp-khb9-qkb7
14
vulnerability VCID-rxxr-sseq-k7a9
15
vulnerability VCID-u6sd-648r-qbdb
16
vulnerability VCID-vacy-878s-3kfb
17
vulnerability VCID-vdpf-jddk-syda
18
vulnerability VCID-weqb-fxu4-17e7
19
vulnerability VCID-whgc-pt2s-77ar
20
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.10
2
url pkg:pypi/django@1.7.3
purl pkg:pypi/django@1.7.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-jfya-694v-myar
13
vulnerability VCID-kq8u-td31-uqaa
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-th75-ys47-d3h8
18
vulnerability VCID-u6sd-648r-qbdb
19
vulnerability VCID-vacy-878s-3kfb
20
vulnerability VCID-vdpf-jddk-syda
21
vulnerability VCID-weqb-fxu4-17e7
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.3
aliases CVE-2015-0221, GHSA-jhjg-w2cp-5j44, PYSEC-2015-6
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ta66-7qrm-sbhu
30
url VCID-u4a7-uvcb-9kf8
vulnerability_id VCID-u4a7-uvcb-9kf8
summary The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0482.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0482.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0482
reference_id
reference_type
scores
0
value 0.00711
scoring_system epss
scoring_elements 0.72624
published_at 2026-06-04T12:55:00Z
1
value 0.00711
scoring_system epss
scoring_elements 0.72663
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0482
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
7
reference_url http://secunia.com/advisories/59782
reference_id
reference_type
scores
url http://secunia.com/advisories/59782
8
reference_url http://secunia.com/advisories/61276
reference_id
reference_type
scores
url http://secunia.com/advisories/61276
9
reference_url http://secunia.com/advisories/61281
reference_id
reference_type
scores
url http://secunia.com/advisories/61281
10
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
11
reference_url https://github.com/django/django/blob/aa3cb3f37265be37d892e2b391ff023e9caee2a4/docs/releases/1.5.9.txt#L42
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/blob/aa3cb3f37265be37d892e2b391ff023e9caee2a4/docs/releases/1.5.9.txt#L42
12
reference_url https://github.com/django/django/commit/0268b855f9eab3377f2821164ef3e66037789e09
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/0268b855f9eab3377f2821164ef3e66037789e09
13
reference_url https://github.com/django/django/commit/5307ce565fbedb9cc27cbe7c757b41a00438d37c
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/5307ce565fbedb9cc27cbe7c757b41a00438d37c
14
reference_url https://github.com/django/django/commit/c9e3b9949cd55f090591fbdc4a114fcb8368b6d9
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/c9e3b9949cd55f090591fbdc4a114fcb8368b6d9
15
reference_url https://github.com/django/django/commit/dd68f319b365f6cb38c5a6c106faf4f6142d7d88
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/dd68f319b365f6cb38c5a6c106faf4f6142d7d88
16
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-6.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-6.yaml
17
reference_url https://www.djangoproject.com/weblog/2014/aug/20/security
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2014/aug/20/security
18
reference_url https://www.djangoproject.com/weblog/2014/aug/20/security/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2014/aug/20/security/
19
reference_url http://www.debian.org/security/2014/dsa-3010
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2014/dsa-3010
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1129954
reference_id 1129954
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1129954
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0482
reference_id CVE-2014-0482
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0482
22
reference_url https://github.com/advisories/GHSA-625g-gx8c-xcmg
reference_id GHSA-625g-gx8c-xcmg
reference_type
scores
url https://github.com/advisories/GHSA-625g-gx8c-xcmg
23
reference_url https://security.gentoo.org/glsa/201412-22
reference_id GLSA-201412-22
reference_type
scores
url https://security.gentoo.org/glsa/201412-22
24
reference_url https://usn.ubuntu.com/2347-1/
reference_id USN-2347-1
reference_type
scores
url https://usn.ubuntu.com/2347-1/
fixed_packages
0
url pkg:pypi/django@1.4.14
purl pkg:pypi/django@1.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-8gus-er59-1qak
9
vulnerability VCID-912q-3eks-4yfm
10
vulnerability VCID-9mpt-zxaw-kkeg
11
vulnerability VCID-bahz-gfxv-e3b2
12
vulnerability VCID-bb8b-hq41-s7a6
13
vulnerability VCID-dh12-js4b-h7fw
14
vulnerability VCID-ga69-9y5g-77c3
15
vulnerability VCID-jfya-694v-myar
16
vulnerability VCID-kq8u-td31-uqaa
17
vulnerability VCID-ksh8-pazn-dbca
18
vulnerability VCID-mccp-khb9-qkb7
19
vulnerability VCID-rxxr-sseq-k7a9
20
vulnerability VCID-ta66-7qrm-sbhu
21
vulnerability VCID-th75-ys47-d3h8
22
vulnerability VCID-u6sd-648r-qbdb
23
vulnerability VCID-vdpf-jddk-syda
24
vulnerability VCID-weqb-fxu4-17e7
25
vulnerability VCID-whgc-pt2s-77ar
26
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.14
1
url pkg:pypi/django@1.5.9
purl pkg:pypi/django@1.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-912q-3eks-4yfm
9
vulnerability VCID-9mpt-zxaw-kkeg
10
vulnerability VCID-bahz-gfxv-e3b2
11
vulnerability VCID-bb8b-hq41-s7a6
12
vulnerability VCID-dh12-js4b-h7fw
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-jfya-694v-myar
15
vulnerability VCID-ksh8-pazn-dbca
16
vulnerability VCID-mccp-khb9-qkb7
17
vulnerability VCID-rxxr-sseq-k7a9
18
vulnerability VCID-ta66-7qrm-sbhu
19
vulnerability VCID-u6sd-648r-qbdb
20
vulnerability VCID-vdpf-jddk-syda
21
vulnerability VCID-weqb-fxu4-17e7
22
vulnerability VCID-whgc-pt2s-77ar
23
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.9
2
url pkg:pypi/django@1.6.6
purl pkg:pypi/django@1.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-5q58-pzt4-8uey
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-912q-3eks-4yfm
9
vulnerability VCID-9mpt-zxaw-kkeg
10
vulnerability VCID-bahz-gfxv-e3b2
11
vulnerability VCID-bb8b-hq41-s7a6
12
vulnerability VCID-dh12-js4b-h7fw
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-jfya-694v-myar
15
vulnerability VCID-ksh8-pazn-dbca
16
vulnerability VCID-mccp-khb9-qkb7
17
vulnerability VCID-rxxr-sseq-k7a9
18
vulnerability VCID-ta66-7qrm-sbhu
19
vulnerability VCID-u6sd-648r-qbdb
20
vulnerability VCID-vacy-878s-3kfb
21
vulnerability VCID-vdpf-jddk-syda
22
vulnerability VCID-weqb-fxu4-17e7
23
vulnerability VCID-whgc-pt2s-77ar
24
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.6
3
url pkg:pypi/django@1.7rc3
purl pkg:pypi/django@1.7rc3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7rc3
aliases CVE-2014-0482, GHSA-625g-gx8c-xcmg, PYSEC-2014-6
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u4a7-uvcb-9kf8
31
url VCID-u5u9-xbb6-93hc
vulnerability_id VCID-u5u9-xbb6-93hc
summary Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request.
references
0
reference_url http://openwall.com/lists/oss-security/2011/09/11/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/11/1
1
reference_url http://openwall.com/lists/oss-security/2011/09/13/2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/13/2
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-4139
reference_id
reference_type
scores
0
value 0.00635
scoring_system epss
scoring_elements 0.70822
published_at 2026-06-05T12:55:00Z
1
value 0.00635
scoring_system epss
scoring_elements 0.7078
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-4139
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=737366
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=737366
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4139
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4139
5
reference_url http://secunia.com/advisories/46614
reference_id
reference_type
scores
url http://secunia.com/advisories/46614
6
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
7
reference_url https://github.com/django/django/commit/2f7fadc38efa58ac0a8f93f936b82332a199f396
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/2f7fadc38efa58ac0a8f93f936b82332a199f396
8
reference_url https://github.com/django/django/commit/c613af4d6485586c79d692b70a9acac429f3ca9d
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/c613af4d6485586c79d692b70a9acac429f3ca9d
9
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-4.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-4.yaml
10
reference_url https://hermes.opensuse.org/messages/14700881
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://hermes.opensuse.org/messages/14700881
11
reference_url https://www.djangoproject.com/weblog/2011/sep/09
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/09
12
reference_url https://www.djangoproject.com/weblog/2011/sep/09/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/09/
13
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/10/127
14
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/10/127/
15
reference_url http://www.debian.org/security/2011/dsa-2332
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2011/dsa-2332
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
reference_id 641405
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-4139
reference_id CVE-2011-4139
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-4139
18
reference_url https://github.com/advisories/GHSA-rm2j-x595-q9cj
reference_id GHSA-rm2j-x595-q9cj
reference_type
scores
url https://github.com/advisories/GHSA-rm2j-x595-q9cj
19
reference_url https://usn.ubuntu.com/1297-1/
reference_id USN-1297-1
reference_type
scores
url https://usn.ubuntu.com/1297-1/
fixed_packages
0
url pkg:pypi/django@1.2.7
purl pkg:pypi/django@1.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-7g7m-bfe1-wkhd
9
vulnerability VCID-7rz2-nqdn-hycc
10
vulnerability VCID-8gus-er59-1qak
11
vulnerability VCID-8v2c-7739-2ugp
12
vulnerability VCID-912q-3eks-4yfm
13
vulnerability VCID-9bsf-vm3b-ubhw
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ffsr-th58-p3ct
19
vulnerability VCID-ga69-9y5g-77c3
20
vulnerability VCID-jfya-694v-myar
21
vulnerability VCID-ksh8-pazn-dbca
22
vulnerability VCID-mccp-khb9-qkb7
23
vulnerability VCID-r7tk-79xy-jkhj
24
vulnerability VCID-rq19-9v21-47dy
25
vulnerability VCID-rxxr-sseq-k7a9
26
vulnerability VCID-ta66-7qrm-sbhu
27
vulnerability VCID-u4a7-uvcb-9kf8
28
vulnerability VCID-u6sd-648r-qbdb
29
vulnerability VCID-vdpf-jddk-syda
30
vulnerability VCID-vj5u-2ukv-audq
31
vulnerability VCID-weqb-fxu4-17e7
32
vulnerability VCID-whgc-pt2s-77ar
33
vulnerability VCID-xf2n-qua7-m7fb
34
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.7
1
url pkg:pypi/django@1.3.1
purl pkg:pypi/django@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-j7jf-zzvz-skgm
24
vulnerability VCID-jfya-694v-myar
25
vulnerability VCID-ksh8-pazn-dbca
26
vulnerability VCID-mccp-khb9-qkb7
27
vulnerability VCID-qu99-yudm-57fp
28
vulnerability VCID-r7tk-79xy-jkhj
29
vulnerability VCID-rq19-9v21-47dy
30
vulnerability VCID-rxxr-sseq-k7a9
31
vulnerability VCID-ta66-7qrm-sbhu
32
vulnerability VCID-u4a7-uvcb-9kf8
33
vulnerability VCID-u6sd-648r-qbdb
34
vulnerability VCID-vdpf-jddk-syda
35
vulnerability VCID-vj5u-2ukv-audq
36
vulnerability VCID-weqb-fxu4-17e7
37
vulnerability VCID-whgc-pt2s-77ar
38
vulnerability VCID-xf2n-qua7-m7fb
39
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.1
aliases CVE-2011-4139, GHSA-rm2j-x595-q9cj, PYSEC-2011-4
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u5u9-xbb6-93hc
32
url VCID-u6sd-648r-qbdb
vulnerability_id VCID-u6sd-648r-qbdb
summary Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonly_fields, as demonstrated by a @property.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2241.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2241.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2241
reference_id
reference_type
scores
0
value 0.00257
scoring_system epss
scoring_elements 0.49355
published_at 2026-06-05T12:55:00Z
1
value 0.00257
scoring_system epss
scoring_elements 0.49293
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2241
2
reference_url https://code.djangoproject.com/ticket/24461
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://code.djangoproject.com/ticket/24461
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2241
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2241
4
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
5
reference_url https://github.com/django/django/commit/2654e1b93923bac55f12b4e66c5e39b16695ace5
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/2654e1b93923bac55f12b4e66c5e39b16695ace5
6
reference_url https://github.com/django/django/commit/82c9169077a066995e3b00aac551bf1c8a89d98a
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/82c9169077a066995e3b00aac551bf1c8a89d98a
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-8.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-8.yaml
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-2241
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-2241
9
reference_url https://web.archive.org/web/20150523054951/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:109/?name=MDVSA-2015:109
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150523054951/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:109/?name=MDVSA-2015:109
10
reference_url https://web.archive.org/web/20171112005349/http://www.securityfocus.com/bid/73095
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20171112005349/http://www.securityfocus.com/bid/73095
11
reference_url https://www.djangoproject.com/weblog/2015/mar/09/security-releases
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2015/mar/09/security-releases
12
reference_url https://www.djangoproject.com/weblog/2015/mar/09/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/mar/09/security-releases/
13
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:109
14
reference_url http://www.securityfocus.com/bid/73095
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/73095
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1200922
reference_id 1200922
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1200922
16
reference_url https://github.com/advisories/GHSA-6565-fg86-6jcx
reference_id GHSA-6565-fg86-6jcx
reference_type
scores
url https://github.com/advisories/GHSA-6565-fg86-6jcx
fixed_packages
0
url pkg:pypi/django@1.7.6
purl pkg:pypi/django@1.7.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-ga69-9y5g-77c3
12
vulnerability VCID-jfya-694v-myar
13
vulnerability VCID-kq8u-td31-uqaa
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-rxxr-sseq-k7a9
17
vulnerability VCID-th75-ys47-d3h8
18
vulnerability VCID-vacy-878s-3kfb
19
vulnerability VCID-vdpf-jddk-syda
20
vulnerability VCID-weqb-fxu4-17e7
21
vulnerability VCID-whgc-pt2s-77ar
22
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.6
1
url pkg:pypi/django@1.8b2
purl pkg:pypi/django@1.8b2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6w99-8w84-jkh9
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-8gus-er59-1qak
8
vulnerability VCID-9mpt-zxaw-kkeg
9
vulnerability VCID-bahz-gfxv-e3b2
10
vulnerability VCID-bb8b-hq41-s7a6
11
vulnerability VCID-c58g-7jpv-t7hc
12
vulnerability VCID-d62f-7csz-fuhm
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-ksh8-pazn-dbca
15
vulnerability VCID-mccp-khb9-qkb7
16
vulnerability VCID-n2eg-vn4k-yycf
17
vulnerability VCID-qy2a-mvpz-q7eh
18
vulnerability VCID-rruq-9scz-vbg8
19
vulnerability VCID-rxxr-sseq-k7a9
20
vulnerability VCID-vacy-878s-3kfb
21
vulnerability VCID-vdpf-jddk-syda
22
vulnerability VCID-weqb-fxu4-17e7
23
vulnerability VCID-whgc-pt2s-77ar
24
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8b2
aliases CVE-2015-2241, GHSA-6565-fg86-6jcx, PYSEC-2015-8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u6sd-648r-qbdb
33
url VCID-vdpf-jddk-syda
vulnerability_id VCID-vdpf-jddk-syda
summary insufficient validation
references
0
reference_url http://packetstormsecurity.com/files/155872/Django-Account-Hijack.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/155872/Django-Account-Hijack.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19844.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19844.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19844
reference_id
reference_type
scores
0
value 0.15418
scoring_system epss
scoring_elements 0.94771
published_at 2026-06-04T12:55:00Z
1
value 0.15418
scoring_system epss
scoring_elements 0.94779
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19844
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19844
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19844
4
reference_url https://docs.djangoproject.com/en/dev/releases/security
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/dev/releases/security
5
reference_url https://docs.djangoproject.com/en/dev/releases/security/
reference_id
reference_type
scores
url https://docs.djangoproject.com/en/dev/releases/security/
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://github.com/advisories/GHSA-vfq6-hq5r-27r6
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-vfq6-hq5r-27r6
8
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
9
reference_url https://github.com/django/django/commit/302a4ff1e8b1c798aab97673909c7a3dfda42c26
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/302a4ff1e8b1c798aab97673909c7a3dfda42c26
10
reference_url https://github.com/django/django/commit/4d334bea06cac63dc1272abcec545b85136cca0e
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/4d334bea06cac63dc1272abcec545b85136cca0e
11
reference_url https://github.com/django/django/commit/5b1fbcef7a8bec991ebe7b2a18b5d5a95d72cb70
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/5b1fbcef7a8bec991ebe7b2a18b5d5a95d72cb70
12
reference_url https://github.com/django/django/commit/f4cff43bf921fcea6a29b726eb66767f67753fa2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/f4cff43bf921fcea6a29b726eb66767f67753fa2
13
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-16.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-16.yaml
14
reference_url https://groups.google.com/forum/#!topic/django-announce/3oaB2rVH3a0
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!topic/django-announce/3oaB2rVH3a0
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCM2DPUI7TOZWN4A6JFQFUVQ2XGE7GUD
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCM2DPUI7TOZWN4A6JFQFUVQ2XGE7GUD
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCM2DPUI7TOZWN4A6JFQFUVQ2XGE7GUD/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCM2DPUI7TOZWN4A6JFQFUVQ2XGE7GUD/
17
reference_url https://seclists.org/bugtraq/2020/Jan/9
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2020/Jan/9
18
reference_url https://security.gentoo.org/glsa/202004-17
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202004-17
19
reference_url https://security.netapp.com/advisory/ntap-20200110-0003
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20200110-0003
20
reference_url https://security.netapp.com/advisory/ntap-20200110-0003/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20200110-0003/
21
reference_url https://usn.ubuntu.com/4224-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4224-1
22
reference_url https://usn.ubuntu.com/4224-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4224-1/
23
reference_url https://www.debian.org/security/2020/dsa-4598
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2020/dsa-4598
24
reference_url https://www.djangoproject.com/weblog/2019/dec/18/security-releases
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2019/dec/18/security-releases
25
reference_url https://www.djangoproject.com/weblog/2019/dec/18/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2019/dec/18/security-releases/
26
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1788425
reference_id 1788425
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1788425
27
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946937
reference_id 946937
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946937
28
reference_url https://security.archlinux.org/AVG-1080
reference_id AVG-1080
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1080
29
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/webapps/47879.md
reference_id CVE-2019-19844
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/webapps/47879.md
30
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19844
reference_id CVE-2019-19844
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19844
31
reference_url https://ryu22e.org/en/posts/2019/12/25/django-cve-2019-19844/
reference_id CVE-2019-19844
reference_type exploit
scores
url https://ryu22e.org/en/posts/2019/12/25/django-cve-2019-19844/
32
reference_url https://usn.ubuntu.com/6722-1/
reference_id USN-6722-1
reference_type
scores
url https://usn.ubuntu.com/6722-1/
fixed_packages
0
url pkg:pypi/django@1.11.27
purl pkg:pypi/django@1.11.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-9mpt-zxaw-kkeg
4
vulnerability VCID-bb8b-hq41-s7a6
5
vulnerability VCID-ga69-9y5g-77c3
6
vulnerability VCID-m4wa-xv9b-q7ce
7
vulnerability VCID-whgc-pt2s-77ar
8
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.27
1
url pkg:pypi/django@2.2.9
purl pkg:pypi/django@2.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4cp2-k4mn-8ffj
2
vulnerability VCID-4tyd-97z5-z3ar
3
vulnerability VCID-51tx-4tp9-kbcz
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-6jpg-yrf8-cufy
6
vulnerability VCID-9end-mq19-rke5
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-attf-6gj8-ebaj
9
vulnerability VCID-bb8b-hq41-s7a6
10
vulnerability VCID-drwp-htkk-bkfh
11
vulnerability VCID-fhp8-tck4-mye4
12
vulnerability VCID-fksk-pr23-2yd8
13
vulnerability VCID-ga69-9y5g-77c3
14
vulnerability VCID-hh9b-52xn-z7a9
15
vulnerability VCID-j81e-su1y-tqa6
16
vulnerability VCID-m4wa-xv9b-q7ce
17
vulnerability VCID-n9vn-4uxr-hkau
18
vulnerability VCID-na9w-xkvx-cbhd
19
vulnerability VCID-nss9-1yrb-x7f2
20
vulnerability VCID-q8r2-m9s6-rbek
21
vulnerability VCID-qvfs-2v1h-p3h4
22
vulnerability VCID-u9q1-63gf-7feh
23
vulnerability VCID-whgc-pt2s-77ar
24
vulnerability VCID-wnxx-rc7w-cke4
25
vulnerability VCID-ynt9-h6ww-h7e9
26
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.2.9
2
url pkg:pypi/django@3.0.1
purl pkg:pypi/django@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4cp2-k4mn-8ffj
2
vulnerability VCID-4pb2-tqru-uufs
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-9mpt-zxaw-kkeg
6
vulnerability VCID-bb8b-hq41-s7a6
7
vulnerability VCID-fhp8-tck4-mye4
8
vulnerability VCID-ga69-9y5g-77c3
9
vulnerability VCID-hh9b-52xn-z7a9
10
vulnerability VCID-j81e-su1y-tqa6
11
vulnerability VCID-m4wa-xv9b-q7ce
12
vulnerability VCID-n9vn-4uxr-hkau
13
vulnerability VCID-na9w-xkvx-cbhd
14
vulnerability VCID-q8r2-m9s6-rbek
15
vulnerability VCID-qvfs-2v1h-p3h4
16
vulnerability VCID-whgc-pt2s-77ar
17
vulnerability VCID-wnxx-rc7w-cke4
18
vulnerability VCID-ynt9-h6ww-h7e9
19
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.0.1
aliases CVE-2019-19844, GHSA-vfq6-hq5r-27r6, PYSEC-2019-16
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vdpf-jddk-syda
34
url VCID-vj5u-2ukv-audq
vulnerability_id VCID-vj5u-2ukv-audq
summary The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-3444
reference_id
reference_type
scores
0
value 0.0119
scoring_system epss
scoring_elements 0.79198
published_at 2026-06-05T12:55:00Z
1
value 0.0119
scoring_system epss
scoring_elements 0.79172
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-3444
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3444
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3444
2
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
3
reference_url https://github.com/django/django/commit/9ca0ff6268eeff92d0d0ac2c315d4b6a8e229155
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/9ca0ff6268eeff92d0d0ac2c315d4b6a8e229155
4
reference_url https://github.com/django/django/commit/b2eb4787a0fff9c9993b78be5c698e85108f3446
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/b2eb4787a0fff9c9993b78be5c698e85108f3446
5
reference_url https://github.com/django/django/commit/c14f325c4eef628bc7bfd8873c3a72aeb0219141
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/c14f325c4eef628bc7bfd8873c3a72aeb0219141
6
reference_url https://github.com/django/django/commit/da33d67181b53fe6cc737ac1220153814a1509f6
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/da33d67181b53fe6cc737ac1220153814a1509f6
7
reference_url https://github.com/django/django/commit/dd16b17099b7d86f27773df048c5014cf439b282
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/dd16b17099b7d86f27773df048c5014cf439b282
8
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2012-4.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2012-4.yaml
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-3444
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-3444
10
reference_url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued
11
reference_url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
12
reference_url http://www.debian.org/security/2012/dsa-2529
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2012/dsa-2529
13
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2012:143
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2012:143
14
reference_url http://www.openwall.com/lists/oss-security/2012/07/31/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/07/31/1
15
reference_url http://www.openwall.com/lists/oss-security/2012/07/31/2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/07/31/2
16
reference_url http://www.ubuntu.com/usn/USN-1560-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-1560-1
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683364
reference_id 683364
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683364
18
reference_url https://github.com/advisories/GHSA-5h2q-4hrp-v9rr
reference_id GHSA-5h2q-4hrp-v9rr
reference_type
scores
url https://github.com/advisories/GHSA-5h2q-4hrp-v9rr
19
reference_url https://usn.ubuntu.com/1560-1/
reference_id USN-1560-1
reference_type
scores
url https://usn.ubuntu.com/1560-1/
fixed_packages
0
url pkg:pypi/django@1.3.2
purl pkg:pypi/django@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7rz2-nqdn-hycc
12
vulnerability VCID-8gus-er59-1qak
13
vulnerability VCID-8v2c-7739-2ugp
14
vulnerability VCID-912q-3eks-4yfm
15
vulnerability VCID-9mpt-zxaw-kkeg
16
vulnerability VCID-bahz-gfxv-e3b2
17
vulnerability VCID-bb8b-hq41-s7a6
18
vulnerability VCID-dh12-js4b-h7fw
19
vulnerability VCID-ffsr-th58-p3ct
20
vulnerability VCID-ga69-9y5g-77c3
21
vulnerability VCID-j7jf-zzvz-skgm
22
vulnerability VCID-jfya-694v-myar
23
vulnerability VCID-ksh8-pazn-dbca
24
vulnerability VCID-mccp-khb9-qkb7
25
vulnerability VCID-qu99-yudm-57fp
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u6sd-648r-qbdb
32
vulnerability VCID-vdpf-jddk-syda
33
vulnerability VCID-weqb-fxu4-17e7
34
vulnerability VCID-whgc-pt2s-77ar
35
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.2
1
url pkg:pypi/django@1.4.1
purl pkg:pypi/django@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3juv-mecf-akdp
3
vulnerability VCID-3kza-a88p-kfg7
4
vulnerability VCID-3sg7-t77d-rkc6
5
vulnerability VCID-492e-xffn-3bds
6
vulnerability VCID-4tyd-97z5-z3ar
7
vulnerability VCID-5dxz-7swx-rygn
8
vulnerability VCID-5q58-pzt4-8uey
9
vulnerability VCID-5vmb-d4xp-zfgy
10
vulnerability VCID-6w99-8w84-jkh9
11
vulnerability VCID-6wah-r8vr-5qc4
12
vulnerability VCID-71t1-69yq-c7h6
13
vulnerability VCID-7rz2-nqdn-hycc
14
vulnerability VCID-8gus-er59-1qak
15
vulnerability VCID-8v2c-7739-2ugp
16
vulnerability VCID-912q-3eks-4yfm
17
vulnerability VCID-9bqp-b6rw-mye7
18
vulnerability VCID-9mpt-zxaw-kkeg
19
vulnerability VCID-bahz-gfxv-e3b2
20
vulnerability VCID-bb8b-hq41-s7a6
21
vulnerability VCID-dh12-js4b-h7fw
22
vulnerability VCID-ffsr-th58-p3ct
23
vulnerability VCID-g2z3-2h8p-c7ge
24
vulnerability VCID-ga69-9y5g-77c3
25
vulnerability VCID-j7jf-zzvz-skgm
26
vulnerability VCID-jfya-694v-myar
27
vulnerability VCID-kq8u-td31-uqaa
28
vulnerability VCID-ksh8-pazn-dbca
29
vulnerability VCID-mccp-khb9-qkb7
30
vulnerability VCID-ps24-pjj4-uqd1
31
vulnerability VCID-qu99-yudm-57fp
32
vulnerability VCID-r7tk-79xy-jkhj
33
vulnerability VCID-rq19-9v21-47dy
34
vulnerability VCID-rtjn-qccc-8kc7
35
vulnerability VCID-rxxr-sseq-k7a9
36
vulnerability VCID-ta66-7qrm-sbhu
37
vulnerability VCID-th75-ys47-d3h8
38
vulnerability VCID-u4a7-uvcb-9kf8
39
vulnerability VCID-u6sd-648r-qbdb
40
vulnerability VCID-vdpf-jddk-syda
41
vulnerability VCID-weqb-fxu4-17e7
42
vulnerability VCID-whgc-pt2s-77ar
43
vulnerability VCID-x212-mskt-9bbw
44
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.1
aliases CVE-2012-3444, GHSA-5h2q-4hrp-v9rr, PYSEC-2012-4
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vj5u-2ukv-audq
35
url VCID-weqb-fxu4-17e7
vulnerability_id VCID-weqb-fxu4-17e7
summary The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2016-2038.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-2038.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2016-2039.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-2039.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2016-2040.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-2040.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2016-2041.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-2041.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2016-2042.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-2042.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2016-2043.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-2043.html
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7401.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7401.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7401
reference_id
reference_type
scores
0
value 0.06156
scoring_system epss
scoring_elements 0.90993
published_at 2026-06-05T12:55:00Z
1
value 0.06156
scoring_system epss
scoring_elements 0.9098
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7401
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7401
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7401
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
11
reference_url https://github.com/django/django/commit/6118ab7d0676f0d622278e5be215f14fb5410b6a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/6118ab7d0676f0d622278e5be215f14fb5410b6a
12
reference_url https://github.com/django/django/commit/6fe846a8f08dc959003f298b5407e321c6fe3735
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/6fe846a8f08dc959003f298b5407e321c6fe3735
13
reference_url https://github.com/django/django/commit/d1bc980db1c0fffd6d60677e62f70beadb9fe64a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/d1bc980db1c0fffd6d60677e62f70beadb9fe64a
14
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-3.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2016-3.yaml
15
reference_url https://web.archive.org/web/20200227223637/http://www.securityfocus.com/bid/93182
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227223637/http://www.securityfocus.com/bid/93182
16
reference_url https://web.archive.org/web/20210927195154/http://www.securitytracker.com/id/1036899
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210927195154/http://www.securitytracker.com/id/1036899
17
reference_url https://www.djangoproject.com/weblog/2016/sep/26/security-releases
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2016/sep/26/security-releases
18
reference_url https://www.djangoproject.com/weblog/2016/sep/26/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2016/sep/26/security-releases/
19
reference_url http://www.debian.org/security/2016/dsa-3678
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3678
20
reference_url http://www.securityfocus.com/bid/93182
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/93182
21
reference_url http://www.securitytracker.com/id/1036899
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1036899
22
reference_url http://www.ubuntu.com/usn/USN-3089-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-3089-1
23
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1377376
reference_id 1377376
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1377376
24
reference_url https://security.archlinux.org/ASA-201610-13
reference_id ASA-201610-13
reference_type
scores
url https://security.archlinux.org/ASA-201610-13
25
reference_url https://security.archlinux.org/AVG-35
reference_id AVG-35
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-35
26
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-7401
reference_id CVE-2016-7401
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-7401
27
reference_url https://github.com/advisories/GHSA-crhm-qpjc-cm64
reference_id GHSA-crhm-qpjc-cm64
reference_type
scores
url https://github.com/advisories/GHSA-crhm-qpjc-cm64
28
reference_url https://access.redhat.com/errata/RHSA-2016:2038
reference_id RHSA-2016:2038
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2038
29
reference_url https://access.redhat.com/errata/RHSA-2016:2039
reference_id RHSA-2016:2039
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2039
30
reference_url https://access.redhat.com/errata/RHSA-2016:2040
reference_id RHSA-2016:2040
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2040
31
reference_url https://access.redhat.com/errata/RHSA-2016:2041
reference_id RHSA-2016:2041
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2041
32
reference_url https://access.redhat.com/errata/RHSA-2016:2042
reference_id RHSA-2016:2042
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2042
33
reference_url https://access.redhat.com/errata/RHSA-2016:2043
reference_id RHSA-2016:2043
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2043
34
reference_url https://usn.ubuntu.com/3089-1/
reference_id USN-3089-1
reference_type
scores
url https://usn.ubuntu.com/3089-1/
fixed_packages
0
url pkg:pypi/django@1.8.15
purl pkg:pypi/django@1.8.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-6w99-8w84-jkh9
4
vulnerability VCID-8gus-er59-1qak
5
vulnerability VCID-9mpt-zxaw-kkeg
6
vulnerability VCID-bb8b-hq41-s7a6
7
vulnerability VCID-c58g-7jpv-t7hc
8
vulnerability VCID-ga69-9y5g-77c3
9
vulnerability VCID-qy2a-mvpz-q7eh
10
vulnerability VCID-rruq-9scz-vbg8
11
vulnerability VCID-upbz-vg19-rugv
12
vulnerability VCID-vdpf-jddk-syda
13
vulnerability VCID-whgc-pt2s-77ar
14
vulnerability VCID-x61x-6b6k-h3bn
15
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.15
1
url pkg:pypi/django@1.9.10
purl pkg:pypi/django@1.9.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-4tyd-97z5-z3ar
2
vulnerability VCID-5q58-pzt4-8uey
3
vulnerability VCID-6w99-8w84-jkh9
4
vulnerability VCID-8gus-er59-1qak
5
vulnerability VCID-9mpt-zxaw-kkeg
6
vulnerability VCID-bb8b-hq41-s7a6
7
vulnerability VCID-ga69-9y5g-77c3
8
vulnerability VCID-qy2a-mvpz-q7eh
9
vulnerability VCID-rruq-9scz-vbg8
10
vulnerability VCID-upbz-vg19-rugv
11
vulnerability VCID-vdpf-jddk-syda
12
vulnerability VCID-whgc-pt2s-77ar
13
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.10
aliases CVE-2016-7401, GHSA-crhm-qpjc-cm64, PYSEC-2016-3
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-weqb-fxu4-17e7
36
url VCID-whgc-pt2s-77ar
vulnerability_id VCID-whgc-pt2s-77ar
summary 
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `QuerySet.get()`, and the class `Q()`, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the `_connector` argument.
Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.
Django would like to thank cyberstan for reporting this issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-64459.json
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-64459.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-64459
reference_id
reference_type
scores
0
value 0.00296
scoring_system epss
scoring_elements 0.53246
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-64459
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14232
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14232
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41164
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41164
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43665
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43665
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24680
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24680
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27351
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27351
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39329
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39329
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39330
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39614
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39614
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41989
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41989
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41991
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41991
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42005
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45231
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53907
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53907
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56374
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56374
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13372
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26699
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26699
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32873
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32873
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48432
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48432
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57833
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57833
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59681
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59681
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59682
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59682
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64459
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64459
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64460
25
reference_url https://docs.djangoproject.com/en/dev/releases/security
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/dev/releases/security
26
reference_url https://docs.djangoproject.com/en/dev/releases/security/
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-11-06T04:55:36Z/
url https://docs.djangoproject.com/en/dev/releases/security/
27
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
28
reference_url https://github.com/django/django/commit/06dd38324ac3d60d83d9f3adabf0dcdf423d2a85
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/06dd38324ac3d60d83d9f3adabf0dcdf423d2a85
29
reference_url https://github.com/django/django/commit/59ae82e67053d281ff4562a24bbba21299f0a7d4
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/59ae82e67053d281ff4562a24bbba21299f0a7d4
30
reference_url https://github.com/django/django/commit/6703f364d767e949c5b0e4016433ef75063b4f9b
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/6703f364d767e949c5b0e4016433ef75063b4f9b
31
reference_url https://github.com/django/django/commit/72d2c87431f2ae0431d65d0ec792047f078c8241
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/72d2c87431f2ae0431d65d0ec792047f078c8241
32
reference_url https://github.com/omarkurt/django-connector-CVE-2025-64459-testbed
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/omarkurt/django-connector-CVE-2025-64459-testbed
33
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-108.yaml
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-108.yaml
34
reference_url https://groups.google.com/g/django-announce
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-11-06T04:55:36Z/
url https://groups.google.com/g/django-announce
35
reference_url https://shivasurya.me/security/django/2025/11/07/django-sql-injection-CVE-2025-64459.html
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://shivasurya.me/security/django/2025/11/07/django-sql-injection-CVE-2025-64459.html
36
reference_url https://www.djangoproject.com/weblog/2025/nov/05/security-releases
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2025/nov/05/security-releases
37
reference_url https://www.djangoproject.com/weblog/2025/nov/05/security-releases/
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-11-06T04:55:36Z/
url https://www.djangoproject.com/weblog/2025/nov/05/security-releases/
38
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1120139
reference_id 1120139
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1120139
39
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2412651
reference_id 2412651
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2412651
40
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52456.py
reference_id CVE-2025-64459
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52456.py
41
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-64459
reference_id CVE-2025-64459
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-64459
42
reference_url https://github.com/advisories/GHSA-frmv-pr5f-9mcr
reference_id GHSA-frmv-pr5f-9mcr
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-frmv-pr5f-9mcr
43
reference_url https://access.redhat.com/errata/RHSA-2025:23069
reference_id RHSA-2025:23069
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23069
44
reference_url https://access.redhat.com/errata/RHSA-2025:23070
reference_id RHSA-2025:23070
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23070
45
reference_url https://access.redhat.com/errata/RHSA-2025:23130
reference_id RHSA-2025:23130
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23130
46
reference_url https://access.redhat.com/errata/RHSA-2025:23131
reference_id RHSA-2025:23131
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23131
47
reference_url https://access.redhat.com/errata/RHSA-2025:23133
reference_id RHSA-2025:23133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23133
48
reference_url https://access.redhat.com/errata/RHSA-2025:23196
reference_id RHSA-2025:23196
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23196
49
reference_url https://access.redhat.com/errata/RHSA-2026:1596
reference_id RHSA-2026:1596
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:1596
50
reference_url https://usn.ubuntu.com/7859-1/
reference_id USN-7859-1
reference_type
scores
url https://usn.ubuntu.com/7859-1/
fixed_packages
0
url pkg:pypi/django@4.2.26
purl pkg:pypi/django@4.2.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4kcg-gx5y-cuaw
1
vulnerability VCID-7c5n-nzwk-v7bz
2
vulnerability VCID-7upw-5p86-8bfr
3
vulnerability VCID-fcg9-xypn-ykhf
4
vulnerability VCID-ga7z-wj4j-63h1
5
vulnerability VCID-jybd-p65h-xffy
6
vulnerability VCID-kxdd-yzp3-r7cb
7
vulnerability VCID-phkp-9abp-f3dq
8
vulnerability VCID-r1vx-vv7d-gqaj
9
vulnerability VCID-shch-yusm-1uck
10
vulnerability VCID-shjc-2j68-2yfy
11
vulnerability VCID-tktt-vg92-6kae
12
vulnerability VCID-tuqc-c251-h7ds
13
vulnerability VCID-w777-44ns-cybg
14
vulnerability VCID-wa3g-27sx-mbcw
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.26
1
url pkg:pypi/django@5.1.14
purl pkg:pypi/django@5.1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7c5n-nzwk-v7bz
1
vulnerability VCID-fcg9-xypn-ykhf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.14
2
url pkg:pypi/django@5.2.8
purl pkg:pypi/django@5.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2as8-7qx6-2kba
1
vulnerability VCID-4gpn-bf2d-ybfb
2
vulnerability VCID-4kcg-gx5y-cuaw
3
vulnerability VCID-55xg-pw9n-zkdy
4
vulnerability VCID-7c5n-nzwk-v7bz
5
vulnerability VCID-7upw-5p86-8bfr
6
vulnerability VCID-abpe-htm1-9ubp
7
vulnerability VCID-eqsc-axng-ckca
8
vulnerability VCID-fcg9-xypn-ykhf
9
vulnerability VCID-fsz5-dkw2-hyap
10
vulnerability VCID-fxuu-kk52-r7ch
11
vulnerability VCID-ga7z-wj4j-63h1
12
vulnerability VCID-jybd-p65h-xffy
13
vulnerability VCID-kxdd-yzp3-r7cb
14
vulnerability VCID-m4am-h2ea-3ffr
15
vulnerability VCID-phkp-9abp-f3dq
16
vulnerability VCID-r1vx-vv7d-gqaj
17
vulnerability VCID-shch-yusm-1uck
18
vulnerability VCID-shjc-2j68-2yfy
19
vulnerability VCID-tktt-vg92-6kae
20
vulnerability VCID-tuqc-c251-h7ds
21
vulnerability VCID-w777-44ns-cybg
22
vulnerability VCID-wa3g-27sx-mbcw
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.8
3
url pkg:pypi/django@6.0a1
purl pkg:pypi/django@6.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4kcg-gx5y-cuaw
1
vulnerability VCID-jybd-p65h-xffy
2
vulnerability VCID-r1vx-vv7d-gqaj
3
vulnerability VCID-shch-yusm-1uck
4
vulnerability VCID-shjc-2j68-2yfy
5
vulnerability VCID-wa3g-27sx-mbcw
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@6.0a1
aliases BIT-django-2025-64459, CVE-2025-64459, GHSA-frmv-pr5f-9mcr, PYSEC-2025-108
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-whgc-pt2s-77ar
37
url VCID-xf2n-qua7-m7fb
vulnerability_id VCID-xf2n-qua7-m7fb
summary The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.
references
0
reference_url http://openwall.com/lists/oss-security/2011/09/11/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/11/1
1
reference_url http://openwall.com/lists/oss-security/2011/09/13/2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/09/13/2
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-4140
reference_id
reference_type
scores
0
value 0.00345
scoring_system epss
scoring_elements 0.57369
published_at 2026-06-05T12:55:00Z
1
value 0.00345
scoring_system epss
scoring_elements 0.57317
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-4140
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=737366
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=737366
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4140
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4140
5
reference_url http://secunia.com/advisories/46614
reference_id
reference_type
scores
url http://secunia.com/advisories/46614
6
reference_url https://github.com/advisories/GHSA-h95j-h2rv-qrg4
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-h95j-h2rv-qrg4
7
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
8
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-5.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-5.yaml
9
reference_url https://hermes.opensuse.org/messages/14700881
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://hermes.opensuse.org/messages/14700881
10
reference_url https://web.archive.org/web/20140806062902/http://secunia.com/advisories/46614
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140806062902/http://secunia.com/advisories/46614
11
reference_url https://www.djangoproject.com/weblog/2011/sep/09
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/09
12
reference_url https://www.djangoproject.com/weblog/2011/sep/09/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/09/
13
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2011/sep/10/127
14
reference_url https://www.djangoproject.com/weblog/2011/sep/10/127/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2011/sep/10/127/
15
reference_url http://www.debian.org/security/2011/dsa-2332
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2011/dsa-2332
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
reference_id 641405
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641405
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-4140
reference_id CVE-2011-4140
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-4140
fixed_packages
0
url pkg:pypi/django@1.2.7
purl pkg:pypi/django@1.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-7g7m-bfe1-wkhd
9
vulnerability VCID-7rz2-nqdn-hycc
10
vulnerability VCID-8gus-er59-1qak
11
vulnerability VCID-8v2c-7739-2ugp
12
vulnerability VCID-912q-3eks-4yfm
13
vulnerability VCID-9bsf-vm3b-ubhw
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ffsr-th58-p3ct
19
vulnerability VCID-ga69-9y5g-77c3
20
vulnerability VCID-jfya-694v-myar
21
vulnerability VCID-ksh8-pazn-dbca
22
vulnerability VCID-mccp-khb9-qkb7
23
vulnerability VCID-r7tk-79xy-jkhj
24
vulnerability VCID-rq19-9v21-47dy
25
vulnerability VCID-rxxr-sseq-k7a9
26
vulnerability VCID-ta66-7qrm-sbhu
27
vulnerability VCID-u4a7-uvcb-9kf8
28
vulnerability VCID-u6sd-648r-qbdb
29
vulnerability VCID-vdpf-jddk-syda
30
vulnerability VCID-vj5u-2ukv-audq
31
vulnerability VCID-weqb-fxu4-17e7
32
vulnerability VCID-whgc-pt2s-77ar
33
vulnerability VCID-xf2n-qua7-m7fb
34
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.7
1
url pkg:pypi/django@1.3
purl pkg:pypi/django@1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-38e1-hepp-vkg9
2
vulnerability VCID-3juv-mecf-akdp
3
vulnerability VCID-3kza-a88p-kfg7
4
vulnerability VCID-3sg7-t77d-rkc6
5
vulnerability VCID-492e-xffn-3bds
6
vulnerability VCID-4tyd-97z5-z3ar
7
vulnerability VCID-5brz-383w-pfbb
8
vulnerability VCID-5dxz-7swx-rygn
9
vulnerability VCID-5q58-pzt4-8uey
10
vulnerability VCID-5vmb-d4xp-zfgy
11
vulnerability VCID-66ax-8wdn-1bgb
12
vulnerability VCID-6w99-8w84-jkh9
13
vulnerability VCID-6wah-r8vr-5qc4
14
vulnerability VCID-7g7m-bfe1-wkhd
15
vulnerability VCID-7rz2-nqdn-hycc
16
vulnerability VCID-8gus-er59-1qak
17
vulnerability VCID-8v2c-7739-2ugp
18
vulnerability VCID-912q-3eks-4yfm
19
vulnerability VCID-9bsf-vm3b-ubhw
20
vulnerability VCID-9mpt-zxaw-kkeg
21
vulnerability VCID-bahz-gfxv-e3b2
22
vulnerability VCID-bb8b-hq41-s7a6
23
vulnerability VCID-dh12-js4b-h7fw
24
vulnerability VCID-ffsr-th58-p3ct
25
vulnerability VCID-ga69-9y5g-77c3
26
vulnerability VCID-j7jf-zzvz-skgm
27
vulnerability VCID-jfya-694v-myar
28
vulnerability VCID-ksh8-pazn-dbca
29
vulnerability VCID-mccp-khb9-qkb7
30
vulnerability VCID-qu99-yudm-57fp
31
vulnerability VCID-r7tk-79xy-jkhj
32
vulnerability VCID-rq19-9v21-47dy
33
vulnerability VCID-rxxr-sseq-k7a9
34
vulnerability VCID-ta66-7qrm-sbhu
35
vulnerability VCID-u4a7-uvcb-9kf8
36
vulnerability VCID-u5u9-xbb6-93hc
37
vulnerability VCID-u6sd-648r-qbdb
38
vulnerability VCID-vdpf-jddk-syda
39
vulnerability VCID-vj5u-2ukv-audq
40
vulnerability VCID-weqb-fxu4-17e7
41
vulnerability VCID-whgc-pt2s-77ar
42
vulnerability VCID-xf2n-qua7-m7fb
43
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3
2
url pkg:pypi/django@1.3.1
purl pkg:pypi/django@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-j7jf-zzvz-skgm
24
vulnerability VCID-jfya-694v-myar
25
vulnerability VCID-ksh8-pazn-dbca
26
vulnerability VCID-mccp-khb9-qkb7
27
vulnerability VCID-qu99-yudm-57fp
28
vulnerability VCID-r7tk-79xy-jkhj
29
vulnerability VCID-rq19-9v21-47dy
30
vulnerability VCID-rxxr-sseq-k7a9
31
vulnerability VCID-ta66-7qrm-sbhu
32
vulnerability VCID-u4a7-uvcb-9kf8
33
vulnerability VCID-u6sd-648r-qbdb
34
vulnerability VCID-vdpf-jddk-syda
35
vulnerability VCID-vj5u-2ukv-audq
36
vulnerability VCID-weqb-fxu4-17e7
37
vulnerability VCID-whgc-pt2s-77ar
38
vulnerability VCID-xf2n-qua7-m7fb
39
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.1
3
url pkg:pypi/django@1.3.2
purl pkg:pypi/django@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7rz2-nqdn-hycc
12
vulnerability VCID-8gus-er59-1qak
13
vulnerability VCID-8v2c-7739-2ugp
14
vulnerability VCID-912q-3eks-4yfm
15
vulnerability VCID-9mpt-zxaw-kkeg
16
vulnerability VCID-bahz-gfxv-e3b2
17
vulnerability VCID-bb8b-hq41-s7a6
18
vulnerability VCID-dh12-js4b-h7fw
19
vulnerability VCID-ffsr-th58-p3ct
20
vulnerability VCID-ga69-9y5g-77c3
21
vulnerability VCID-j7jf-zzvz-skgm
22
vulnerability VCID-jfya-694v-myar
23
vulnerability VCID-ksh8-pazn-dbca
24
vulnerability VCID-mccp-khb9-qkb7
25
vulnerability VCID-qu99-yudm-57fp
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u6sd-648r-qbdb
32
vulnerability VCID-vdpf-jddk-syda
33
vulnerability VCID-weqb-fxu4-17e7
34
vulnerability VCID-whgc-pt2s-77ar
35
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.2
aliases CVE-2011-4140, GHSA-h95j-h2rv-qrg4, PYSEC-2011-5
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xf2n-qua7-m7fb
38
url VCID-ynt9-h6ww-h7e9
vulnerability_id VCID-ynt9-h6ww-h7e9
summary An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-57833.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-57833.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-57833
reference_id
reference_type
scores
0
value 0.00074
scoring_system epss
scoring_elements 0.22523
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-57833
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14232
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14232
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41164
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41164
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43665
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43665
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24680
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24680
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27351
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27351
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39329
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39329
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39330
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39614
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39614
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41989
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41989
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41991
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41991
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42005
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45231
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53907
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53907
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56374
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56374
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13372
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26699
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26699
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32873
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32873
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48432
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48432
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57833
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57833
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59681
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59681
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59682
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59682
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64459
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64459
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64460
25
reference_url https://docs.djangoproject.com/en/dev/releases/security
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/dev/releases/security
26
reference_url https://docs.djangoproject.com/en/dev/releases/security/
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-09-08T17:33:03Z/
url https://docs.djangoproject.com/en/dev/releases/security/
27
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
28
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
29
reference_url https://github.com/django/django/commit/102965ea93072fe3c39a30be437c683ec1106ef5
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/102965ea93072fe3c39a30be437c683ec1106ef5
30
reference_url https://github.com/django/django/commit/31334e6965ad136a5e369993b01721499c5d1a92
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/31334e6965ad136a5e369993b01721499c5d1a92
31
reference_url https://github.com/django/django/commit/4c044fcc866ec226f612c475950b690b0139d243
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/4c044fcc866ec226f612c475950b690b0139d243
32
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-105.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-105.yaml
33
reference_url https://groups.google.com/g/django-announce
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-09-08T17:33:03Z/
url https://groups.google.com/g/django-announce
34
reference_url https://lists.debian.org/debian-lts-announce/2025/09/msg00017.html
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2025/09/msg00017.html
35
reference_url https://medium.com/@EyalSec/django-unauthenticated-0-click-rce-and-sql-injection-using-default-configuration-059964f3f898
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-09-08T17:33:03Z/
url https://medium.com/@EyalSec/django-unauthenticated-0-click-rce-and-sql-injection-using-default-configuration-059964f3f898
36
reference_url https://www.djangoproject.com/weblog/2025/sep/03/security-releases
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2025/sep/03/security-releases
37
reference_url https://www.djangoproject.com/weblog/2025/sep/03/security-releases/
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-09-08T17:33:03Z/
url https://www.djangoproject.com/weblog/2025/sep/03/security-releases/
38
reference_url http://www.openwall.com/lists/oss-security/2025/09/03/3
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2025/09/03/3
39
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1113865
reference_id 1113865
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1113865
40
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2392990
reference_id 2392990
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2392990
41
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-57833
reference_id CVE-2025-57833
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-57833
42
reference_url https://github.com/advisories/GHSA-6w2r-r2m5-xq5w
reference_id GHSA-6w2r-r2m5-xq5w
reference_type
scores
url https://github.com/advisories/GHSA-6w2r-r2m5-xq5w
43
reference_url https://access.redhat.com/errata/RHSA-2025:16403
reference_id RHSA-2025:16403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:16403
44
reference_url https://access.redhat.com/errata/RHSA-2025:16404
reference_id RHSA-2025:16404
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:16404
45
reference_url https://access.redhat.com/errata/RHSA-2025:16487
reference_id RHSA-2025:16487
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:16487
46
reference_url https://access.redhat.com/errata/RHSA-2025:16514
reference_id RHSA-2025:16514
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:16514
47
reference_url https://access.redhat.com/errata/RHSA-2025:17498
reference_id RHSA-2025:17498
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:17498
48
reference_url https://access.redhat.com/errata/RHSA-2025:17499
reference_id RHSA-2025:17499
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:17499
49
reference_url https://access.redhat.com/errata/RHSA-2025:17500
reference_id RHSA-2025:17500
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:17500
50
reference_url https://access.redhat.com/errata/RHSA-2025:17606
reference_id RHSA-2025:17606
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:17606
51
reference_url https://access.redhat.com/errata/RHSA-2025:17613
reference_id RHSA-2025:17613
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:17613
52
reference_url https://access.redhat.com/errata/RHSA-2025:17614
reference_id RHSA-2025:17614
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:17614
53
reference_url https://usn.ubuntu.com/7736-1/
reference_id USN-7736-1
reference_type
scores
url https://usn.ubuntu.com/7736-1/
fixed_packages
0
url pkg:pypi/django@4.2.24
purl pkg:pypi/django@4.2.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4kcg-gx5y-cuaw
1
vulnerability VCID-5xtt-au84-zbb2
2
vulnerability VCID-7c5n-nzwk-v7bz
3
vulnerability VCID-7upw-5p86-8bfr
4
vulnerability VCID-fcg9-xypn-ykhf
5
vulnerability VCID-ga69-9y5g-77c3
6
vulnerability VCID-ga7z-wj4j-63h1
7
vulnerability VCID-jybd-p65h-xffy
8
vulnerability VCID-kxdd-yzp3-r7cb
9
vulnerability VCID-n2v7-jqjy-37bc
10
vulnerability VCID-phkp-9abp-f3dq
11
vulnerability VCID-r1vx-vv7d-gqaj
12
vulnerability VCID-shch-yusm-1uck
13
vulnerability VCID-shjc-2j68-2yfy
14
vulnerability VCID-tktt-vg92-6kae
15
vulnerability VCID-tuqc-c251-h7ds
16
vulnerability VCID-w777-44ns-cybg
17
vulnerability VCID-wa3g-27sx-mbcw
18
vulnerability VCID-whgc-pt2s-77ar
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.24
1
url pkg:pypi/django@5.1.12
purl pkg:pypi/django@5.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5xtt-au84-zbb2
1
vulnerability VCID-7c5n-nzwk-v7bz
2
vulnerability VCID-fcg9-xypn-ykhf
3
vulnerability VCID-ga69-9y5g-77c3
4
vulnerability VCID-n2v7-jqjy-37bc
5
vulnerability VCID-whgc-pt2s-77ar
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.12
2
url pkg:pypi/django@5.2.6
purl pkg:pypi/django@5.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2as8-7qx6-2kba
1
vulnerability VCID-4gpn-bf2d-ybfb
2
vulnerability VCID-4kcg-gx5y-cuaw
3
vulnerability VCID-55xg-pw9n-zkdy
4
vulnerability VCID-5xtt-au84-zbb2
5
vulnerability VCID-7c5n-nzwk-v7bz
6
vulnerability VCID-7upw-5p86-8bfr
7
vulnerability VCID-abpe-htm1-9ubp
8
vulnerability VCID-eqsc-axng-ckca
9
vulnerability VCID-fcg9-xypn-ykhf
10
vulnerability VCID-fsz5-dkw2-hyap
11
vulnerability VCID-fxuu-kk52-r7ch
12
vulnerability VCID-ga69-9y5g-77c3
13
vulnerability VCID-ga7z-wj4j-63h1
14
vulnerability VCID-jybd-p65h-xffy
15
vulnerability VCID-kxdd-yzp3-r7cb
16
vulnerability VCID-m4am-h2ea-3ffr
17
vulnerability VCID-n2v7-jqjy-37bc
18
vulnerability VCID-phkp-9abp-f3dq
19
vulnerability VCID-r1vx-vv7d-gqaj
20
vulnerability VCID-shch-yusm-1uck
21
vulnerability VCID-shjc-2j68-2yfy
22
vulnerability VCID-tktt-vg92-6kae
23
vulnerability VCID-tuqc-c251-h7ds
24
vulnerability VCID-w777-44ns-cybg
25
vulnerability VCID-wa3g-27sx-mbcw
26
vulnerability VCID-whgc-pt2s-77ar
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.6
aliases BIT-django-2025-57833, CVE-2025-57833, GHSA-6w2r-r2m5-xq5w, PYSEC-2025-105
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ynt9-h6ww-h7e9
Fixing_vulnerabilities
0
url VCID-kuyz-3pxs-r7cv
vulnerability_id VCID-kuyz-3pxs-r7cv
summary Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that leverage a "combination of browser plugins and redirects," a related issue to CVE-2011-0447.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
2
reference_url http://openwall.com/lists/oss-security/2011/02/09/6
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/02/09/6
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-0696
reference_id
reference_type
scores
0
value 0.0275
scoring_system epss
scoring_elements 0.86293
published_at 2026-06-05T12:55:00Z
1
value 0.0275
scoring_system epss
scoring_elements 0.86271
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-0696
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=676357
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=676357
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0696
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0696
6
reference_url http://secunia.com/advisories/43230
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/43230
7
reference_url http://secunia.com/advisories/43297
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/43297
8
reference_url http://secunia.com/advisories/43382
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/43382
9
reference_url http://secunia.com/advisories/43426
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/43426
10
reference_url https://github.com/advisories/GHSA-5j2h-h5hg-3wf8
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-5j2h-h5hg-3wf8
11
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
12
reference_url https://github.com/django/django/commit/408c5c873ce1437c7eee9544ff279ecbad7e150a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/408c5c873ce1437c7eee9544ff279ecbad7e150a
13
reference_url https://github.com/django/django/commit/818e70344e7193f6ebc73c82ed574e6ce3c91afc
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/818e70344e7193f6ebc73c82ed574e6ce3c91afc
14
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-10.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-10.yaml
15
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-30.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-30.yaml
16
reference_url http://www.debian.org/security/2011/dsa-2163
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2011/dsa-2163
17
reference_url http://www.djangoproject.com/weblog/2011/feb/08/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.djangoproject.com/weblog/2011/feb/08/security
18
reference_url http://www.djangoproject.com/weblog/2011/feb/08/security/
reference_id
reference_type
scores
url http://www.djangoproject.com/weblog/2011/feb/08/security/
19
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
20
reference_url http://www.securityfocus.com/bid/46296
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/46296
21
reference_url http://www.ubuntu.com/usn/USN-1066-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-1066-1
22
reference_url http://www.vupen.com/english/advisories/2011/0372
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0372
23
reference_url http://www.vupen.com/english/advisories/2011/0388
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0388
24
reference_url http://www.vupen.com/english/advisories/2011/0429
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0429
25
reference_url http://www.vupen.com/english/advisories/2011/0439
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0439
26
reference_url http://www.vupen.com/english/advisories/2011/0441
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0441
27
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-0696
reference_id CVE-2011-0696
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-0696
28
reference_url https://usn.ubuntu.com/1066-1/
reference_id USN-1066-1
reference_type
scores
url https://usn.ubuntu.com/1066-1/
fixed_packages
0
url pkg:pypi/django@1.1.4
purl pkg:pypi/django@1.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-38e1-hepp-vkg9
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-4tyd-97z5-z3ar
5
vulnerability VCID-5brz-383w-pfbb
6
vulnerability VCID-5q58-pzt4-8uey
7
vulnerability VCID-5vmb-d4xp-zfgy
8
vulnerability VCID-66ax-8wdn-1bgb
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-jfya-694v-myar
24
vulnerability VCID-ksh8-pazn-dbca
25
vulnerability VCID-mccp-khb9-qkb7
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u5u9-xbb6-93hc
32
vulnerability VCID-u6sd-648r-qbdb
33
vulnerability VCID-vdpf-jddk-syda
34
vulnerability VCID-vj5u-2ukv-audq
35
vulnerability VCID-weqb-fxu4-17e7
36
vulnerability VCID-whgc-pt2s-77ar
37
vulnerability VCID-xf2n-qua7-m7fb
38
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.1.4
1
url pkg:pypi/django@1.2.5
purl pkg:pypi/django@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-38e1-hepp-vkg9
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-4tyd-97z5-z3ar
5
vulnerability VCID-5brz-383w-pfbb
6
vulnerability VCID-5q58-pzt4-8uey
7
vulnerability VCID-5vmb-d4xp-zfgy
8
vulnerability VCID-66ax-8wdn-1bgb
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-jfya-694v-myar
24
vulnerability VCID-ksh8-pazn-dbca
25
vulnerability VCID-mccp-khb9-qkb7
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u5u9-xbb6-93hc
32
vulnerability VCID-u6sd-648r-qbdb
33
vulnerability VCID-vdpf-jddk-syda
34
vulnerability VCID-vj5u-2ukv-audq
35
vulnerability VCID-weqb-fxu4-17e7
36
vulnerability VCID-whgc-pt2s-77ar
37
vulnerability VCID-xf2n-qua7-m7fb
38
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.5
aliases CVE-2011-0696, GHSA-5j2h-h5hg-3wf8, PYSEC-2011-10, PYSEC-2011-30
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kuyz-3pxs-r7cv
1
url VCID-n6ps-f6s6-zkbj
vulnerability_id VCID-n6ps-f6s6-zkbj
summary Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
2
reference_url http://openwall.com/lists/oss-security/2011/02/09/6
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/02/09/6
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-0697
reference_id
reference_type
scores
0
value 0.02962
scoring_system epss
scoring_elements 0.86746
published_at 2026-06-04T12:55:00Z
1
value 0.02962
scoring_system epss
scoring_elements 0.86768
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-0697
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=676359
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=676359
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0697
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0697
6
reference_url http://secunia.com/advisories/43230
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/43230
7
reference_url http://secunia.com/advisories/43297
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/43297
8
reference_url http://secunia.com/advisories/43382
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/43382
9
reference_url http://secunia.com/advisories/43426
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/43426
10
reference_url https://github.com/advisories/GHSA-8m3r-rv5g-fcpq
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-8m3r-rv5g-fcpq
11
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
12
reference_url https://github.com/django/django/commit/1966786d2dde73e17f39cf340eb33fcb5d73904e
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/1966786d2dde73e17f39cf340eb33fcb5d73904e
13
reference_url https://github.com/django/django/commit/1f814a9547842dcfabdae09573055984af9d3fab
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/1f814a9547842dcfabdae09573055984af9d3fab
14
reference_url https://github.com/django/django/commit/90be6ca20d607977dec234ec972b77b83955749b
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/90be6ca20d607977dec234ec972b77b83955749b
15
reference_url https://github.com/django/django/commit/a9cf3d23724ff6918103e86aa863eadd1fab811d
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/a9cf3d23724ff6918103e86aa863eadd1fab811d
16
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-11.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-11.yaml
17
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-31.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-31.yaml
18
reference_url https://web.archive.org/web/20110521033259/http://secunia.com/advisories/43230
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110521033259/http://secunia.com/advisories/43230
19
reference_url https://web.archive.org/web/20110521033304/http://secunia.com/advisories/43297
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110521033304/http://secunia.com/advisories/43297
20
reference_url https://web.archive.org/web/20110521033309/http://secunia.com/advisories/43382
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110521033309/http://secunia.com/advisories/43382
21
reference_url https://web.archive.org/web/20110521033314/http://secunia.com/advisories/43426
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110521033314/http://secunia.com/advisories/43426
22
reference_url https://web.archive.org/web/20130616104703/http://www.securityfocus.com/bid/46296
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20130616104703/http://www.securityfocus.com/bid/46296
23
reference_url http://www.debian.org/security/2011/dsa-2163
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2011/dsa-2163
24
reference_url http://www.djangoproject.com/weblog/2011/feb/08/security
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.djangoproject.com/weblog/2011/feb/08/security
25
reference_url http://www.djangoproject.com/weblog/2011/feb/08/security/
reference_id
reference_type
scores
url http://www.djangoproject.com/weblog/2011/feb/08/security/
26
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
27
reference_url http://www.securityfocus.com/bid/46296
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/46296
28
reference_url http://www.ubuntu.com/usn/USN-1066-1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-1066-1
29
reference_url http://www.vupen.com/english/advisories/2011/0372
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0372
30
reference_url http://www.vupen.com/english/advisories/2011/0388
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0388
31
reference_url http://www.vupen.com/english/advisories/2011/0429
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0429
32
reference_url http://www.vupen.com/english/advisories/2011/0439
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0439
33
reference_url http://www.vupen.com/english/advisories/2011/0441
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2011/0441
34
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-0697
reference_id CVE-2011-0697
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-0697
35
reference_url https://usn.ubuntu.com/1066-1/
reference_id USN-1066-1
reference_type
scores
url https://usn.ubuntu.com/1066-1/
fixed_packages
0
url pkg:pypi/django@1.1.4
purl pkg:pypi/django@1.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-38e1-hepp-vkg9
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-4tyd-97z5-z3ar
5
vulnerability VCID-5brz-383w-pfbb
6
vulnerability VCID-5q58-pzt4-8uey
7
vulnerability VCID-5vmb-d4xp-zfgy
8
vulnerability VCID-66ax-8wdn-1bgb
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-jfya-694v-myar
24
vulnerability VCID-ksh8-pazn-dbca
25
vulnerability VCID-mccp-khb9-qkb7
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u5u9-xbb6-93hc
32
vulnerability VCID-u6sd-648r-qbdb
33
vulnerability VCID-vdpf-jddk-syda
34
vulnerability VCID-vj5u-2ukv-audq
35
vulnerability VCID-weqb-fxu4-17e7
36
vulnerability VCID-whgc-pt2s-77ar
37
vulnerability VCID-xf2n-qua7-m7fb
38
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.1.4
1
url pkg:pypi/django@1.2.5
purl pkg:pypi/django@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-38e1-hepp-vkg9
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-4tyd-97z5-z3ar
5
vulnerability VCID-5brz-383w-pfbb
6
vulnerability VCID-5q58-pzt4-8uey
7
vulnerability VCID-5vmb-d4xp-zfgy
8
vulnerability VCID-66ax-8wdn-1bgb
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-jfya-694v-myar
24
vulnerability VCID-ksh8-pazn-dbca
25
vulnerability VCID-mccp-khb9-qkb7
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u5u9-xbb6-93hc
32
vulnerability VCID-u6sd-648r-qbdb
33
vulnerability VCID-vdpf-jddk-syda
34
vulnerability VCID-vj5u-2ukv-audq
35
vulnerability VCID-weqb-fxu4-17e7
36
vulnerability VCID-whgc-pt2s-77ar
37
vulnerability VCID-xf2n-qua7-m7fb
38
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.5
aliases CVE-2011-0697, GHSA-8m3r-rv5g-fcpq, PYSEC-2011-11, PYSEC-2011-31
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n6ps-f6s6-zkbj
2
url VCID-zd9y-sxbn-kqa3
vulnerability_id VCID-zd9y-sxbn-kqa3
summary Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.
references
0
reference_url http://openwall.com/lists/oss-security/2011/02/09/6
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2011/02/09/6
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-0698
reference_id
reference_type
scores
0
value 0.00719
scoring_system epss
scoring_elements 0.72873
published_at 2026-06-05T12:55:00Z
1
value 0.00719
scoring_system epss
scoring_elements 0.72836
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-0698
2
reference_url http://secunia.com/advisories/43230
reference_id
reference_type
scores
url http://secunia.com/advisories/43230
3
reference_url https://github.com/advisories/GHSA-7g9h-c88w-r7h2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
3
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-7g9h-c88w-r7h2
4
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
5
reference_url https://github.com/django/django/commit/194566480b15cf4e294d3f03ff587019b74044b2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/194566480b15cf4e294d3f03ff587019b74044b2
6
reference_url https://github.com/django/django/commit/570a32a047ea56265646217264b0d3dab1a14dbd
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/570a32a047ea56265646217264b0d3dab1a14dbd
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-12.yaml
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-12.yaml
8
reference_url https://web.archive.org/web/20110521033259/http://secunia.com/advisories/43230
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110521033259/http://secunia.com/advisories/43230
9
reference_url https://web.archive.org/web/20130616104703/http://www.securityfocus.com/bid/46296
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20130616104703/http://www.securityfocus.com/bid/46296
10
reference_url http://www.djangoproject.com/weblog/2011/feb/08/security
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.djangoproject.com/weblog/2011/feb/08/security
11
reference_url http://www.djangoproject.com/weblog/2011/feb/08/security/
reference_id
reference_type
scores
url http://www.djangoproject.com/weblog/2011/feb/08/security/
12
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
13
reference_url http://www.securityfocus.com/bid/46296
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/46296
14
reference_url http://www.vupen.com/english/advisories/2011/0372
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0372
15
reference_url http://www.vupen.com/english/advisories/2011/0439
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0439
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-0698
reference_id CVE-2011-0698
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-0698
fixed_packages
0
url pkg:pypi/django@1.1.4
purl pkg:pypi/django@1.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-38e1-hepp-vkg9
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-4tyd-97z5-z3ar
5
vulnerability VCID-5brz-383w-pfbb
6
vulnerability VCID-5q58-pzt4-8uey
7
vulnerability VCID-5vmb-d4xp-zfgy
8
vulnerability VCID-66ax-8wdn-1bgb
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-jfya-694v-myar
24
vulnerability VCID-ksh8-pazn-dbca
25
vulnerability VCID-mccp-khb9-qkb7
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u5u9-xbb6-93hc
32
vulnerability VCID-u6sd-648r-qbdb
33
vulnerability VCID-vdpf-jddk-syda
34
vulnerability VCID-vj5u-2ukv-audq
35
vulnerability VCID-weqb-fxu4-17e7
36
vulnerability VCID-whgc-pt2s-77ar
37
vulnerability VCID-xf2n-qua7-m7fb
38
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.1.4
1
url pkg:pypi/django@1.2.5
purl pkg:pypi/django@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-38e1-hepp-vkg9
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-4tyd-97z5-z3ar
5
vulnerability VCID-5brz-383w-pfbb
6
vulnerability VCID-5q58-pzt4-8uey
7
vulnerability VCID-5vmb-d4xp-zfgy
8
vulnerability VCID-66ax-8wdn-1bgb
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-jfya-694v-myar
24
vulnerability VCID-ksh8-pazn-dbca
25
vulnerability VCID-mccp-khb9-qkb7
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u5u9-xbb6-93hc
32
vulnerability VCID-u6sd-648r-qbdb
33
vulnerability VCID-vdpf-jddk-syda
34
vulnerability VCID-vj5u-2ukv-audq
35
vulnerability VCID-weqb-fxu4-17e7
36
vulnerability VCID-whgc-pt2s-77ar
37
vulnerability VCID-xf2n-qua7-m7fb
38
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.5
aliases CVE-2011-0698, GHSA-7g9h-c88w-r7h2, PYSEC-2011-12
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zd9y-sxbn-kqa3
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.5