Skip to content

Djangoproject Django vulnerabilities

djangoproject djangoDjango Allows Arbitrary URL GenerationCVE-2012-4520Fix available6.4 MediumNovember 18, 2012
djangoproject djangoDjango vulnerable to Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2012-3444Fix available5.0 MediumJuly 31, 2012
djangoproject djangoDjango Image Field Vulnerable to Image Decompression BombsCVE-2012-3443Fix available5.0 MediumJuly 31, 2012
djangoproject djangoDjango Allows Redirect via Data URLCVE-2012-3442Fix available4.3 MediumJuly 31, 2012
djangoproject djangoDjango Cross-Site Request Forgery vulnerabilityCVE-2011-4140Fix available6.8 MediumOctober 19, 2011
djangoproject djangoDjango Vulnerable to Cache PoisoningCVE-2011-4139Fix available5.0 MediumOctober 19, 2011
djangoproject djangoDjango Might Allow CSRF Requests via URL VerificationCVE-2011-4138Fix available5.0 MediumOctober 19, 2011
djangoproject djangoDenial of service in djangoCVE-2011-4137Fix available5.0 MediumOctober 19, 2011
djangoproject djangoSession manipulation in DjangoCVE-2011-4136Fix available5.8 MediumOctober 19, 2011
djangoproject djangoDirectory traversal in DjangoCVE-2011-0698Fix available7.5 HighFebruary 14, 2011
djangoproject djangoCross-site scripting in djangoCVE-2011-0697Fix available4.3 MediumFebruary 14, 2011
djangoproject djangoCross-site request forgery in DjangoCVE-2011-0696Fix available6.8 MediumFebruary 14, 2011
djangoproject djangoImproper date handling in DjangoCVE-2010-4535Fix available5.0 MediumJanuary 10, 2011
djangoproject djangoImproper query string handling in DjangoCVE-2010-4534Fix available4.0 MediumJanuary 10, 2011
djangoproject djangoCross-site scripting in djangoCVE-2010-3082Fix available4.3 MediumSeptember 14, 2010
djangoproject djangoDjango Regex Algorithmic Complexity Causes Denial of ServiceCVE-2009-3695Fix available5.0 MediumOctober 10, 2009
djangoproject djangoDjango cross-site request forgery (CSRF) vulnerabilityCVE-2008-3909Fix available5.8 MediumSeptember 4, 2008