Search for vulnerabilities
Vulnerability details: VCID-3wb8-gzmb-aaah
Vulnerability ID VCID-3wb8-gzmb-aaah
Aliases CVE-2014-0482
GHSA-625g-gx8c-xcmg
PYSEC-2014-6
Summary The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-287 Improper Authentication
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 7.5 http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
generic_textual MODERATE http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
generic_textual Medium http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0482.html
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00387 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00572 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.0061 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2014-0482
rhbs medium https://bugzilla.redhat.com/show_bug.cgi?id=1129954
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
cvssv3.1 7.5 http://secunia.com/advisories/61281
generic_textual HIGH http://secunia.com/advisories/61281
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-625g-gx8c-xcmg
cvssv3.1 3.7 https://github.com/django/django
generic_textual MODERATE https://github.com/django/django
cvssv3.1 6.5 https://github.com/django/django/blob/aa3cb3f37265be37d892e2b391ff023e9caee2a4/docs/releases/1.5.9.txt#L42
generic_textual MODERATE https://github.com/django/django/blob/aa3cb3f37265be37d892e2b391ff023e9caee2a4/docs/releases/1.5.9.txt#L42
cvssv3.1 6.5 https://github.com/django/django/commit/0268b855f9eab3377f2821164ef3e66037789e09
generic_textual MODERATE https://github.com/django/django/commit/0268b855f9eab3377f2821164ef3e66037789e09
cvssv3.1 6.5 https://github.com/django/django/commit/5307ce565fbedb9cc27cbe7c757b41a00438d37c
generic_textual MODERATE https://github.com/django/django/commit/5307ce565fbedb9cc27cbe7c757b41a00438d37c
cvssv3.1 6.5 https://github.com/django/django/commit/c9e3b9949cd55f090591fbdc4a114fcb8368b6d9
generic_textual MODERATE https://github.com/django/django/commit/c9e3b9949cd55f090591fbdc4a114fcb8368b6d9
cvssv3.1 6.5 https://github.com/django/django/commit/dd68f319b365f6cb38c5a6c106faf4f6142d7d88
generic_textual MODERATE https://github.com/django/django/commit/dd68f319b365f6cb38c5a6c106faf4f6142d7d88
cvssv3.1 6.5 https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-6.yaml
generic_textual MODERATE https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-6.yaml
cvssv2 6.0 https://nvd.nist.gov/vuln/detail/CVE-2014-0482
generic_textual Low https://ubuntu.com/security/notices/USN-2347-1
cvssv3.1 5.3 https://www.djangoproject.com/weblog/2014/aug/20/security
generic_textual MODERATE https://www.djangoproject.com/weblog/2014/aug/20/security
generic_textual Low https://www.djangoproject.com/weblog/2014/aug/20/security/
cvssv3.1 5.3 http://www.debian.org/security/2014/dsa-3010
generic_textual MODERATE http://www.debian.org/security/2014/dsa-3010
Reference id Reference type URL
http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0482.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0482.json
https://api.first.org/data/v1/epss?cve=CVE-2014-0482
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0480
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0481
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0483
http://secunia.com/advisories/59782
http://secunia.com/advisories/61276
http://secunia.com/advisories/61281
https://github.com/django/django
https://github.com/django/django/blob/aa3cb3f37265be37d892e2b391ff023e9caee2a4/docs/releases/1.5.9.txt#L42
https://github.com/django/django/commit/0268b855f9eab3377f2821164ef3e66037789e09
https://github.com/django/django/commit/5307ce565fbedb9cc27cbe7c757b41a00438d37c
https://github.com/django/django/commit/c9e3b9949cd55f090591fbdc4a114fcb8368b6d9
https://github.com/django/django/commit/dd68f319b365f6cb38c5a6c106faf4f6142d7d88
https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-6.yaml
https://ubuntu.com/security/notices/USN-2347-1
https://www.djangoproject.com/weblog/2014/aug/20/security
https://www.djangoproject.com/weblog/2014/aug/20/security/
http://www.debian.org/security/2014/dsa-3010
1129954 https://bugzilla.redhat.com/show_bug.cgi?id=1129954
cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.10:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.11:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.11:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.12:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.12:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.7:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.8:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.4.9:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.4.9:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5.4:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5.5:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5.6:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5.7:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5.8:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5:alpha:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5:alpha:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.5:beta:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.5:beta:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6:-:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6:-:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6.2:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6.3:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6.4:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6.5:*:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6:beta1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6:beta1:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6:beta2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6:beta2:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6:beta3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6:beta3:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.6:beta4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.6:beta4:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.7:beta1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.7:beta1:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.7:beta2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.7:beta2:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.7:beta3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.7:beta3:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.7:beta4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.7:beta4:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.7:rc1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.7:rc1:*:*:*:*:*:*
cpe:2.3:a:djangoproject:django:1.7:rc2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:djangoproject:django:1.7:rc2:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
CVE-2014-0482 https://nvd.nist.gov/vuln/detail/CVE-2014-0482
GHSA-625g-gx8c-xcmg https://github.com/advisories/GHSA-625g-gx8c-xcmg
GLSA-201412-22 https://security.gentoo.org/glsa/201412-22
USN-2347-1 https://usn.ubuntu.com/2347-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at http://secunia.com/advisories/61281
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/django/django
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/django/django/blob/aa3cb3f37265be37d892e2b391ff023e9caee2a4/docs/releases/1.5.9.txt#L42
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/django/django/commit/0268b855f9eab3377f2821164ef3e66037789e09
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/django/django/commit/5307ce565fbedb9cc27cbe7c757b41a00438d37c
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/django/django/commit/c9e3b9949cd55f090591fbdc4a114fcb8368b6d9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/django/django/commit/dd68f319b365f6cb38c5a6c106faf4f6142d7d88
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-6.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2014-0482
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://www.djangoproject.com/weblog/2014/aug/20/security
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.debian.org/security/2014/dsa-3010
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.73689
EPSS Score 0.00387
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.