Tim pengembangan Django memiliki komitmen yang kuat untuk bertanggung jawab melaorkan dan menyingkap dari masalah terkait-keamanan, sebagai diuraikan di Django's security policies.
\nSebagai bagian dari komitmen itu, kami merawat daftar riwayat berikut dari masalah yang telah diperbaiki dan diungkapkan. Untuk setiap masalah, daftar dibawah termasuk tanggal, gambaran singkat CVE identifier jika diberlakukan, sebuah daftar dari versi terpengaruh, sebuah tautan pada pengungkapan penuh dan tautan ke tambalan-tambalan yang sesuai.
\n\n\nSemua masalah keamanan lain telah ditangani dibawah versi dari pengeolahan keamanan Django. Ini adalah terdaftar dibawah.
\n\n\nDenial-of-service melalui kepala Accept-Language besar-berubah-ubah. Full description
\n\n\n\n\n\nCSRF melalui pemeliharaan dari data POST selama masuk admin. Full description
\n\n\n\n\nLintasan-direktori dalam penangan media peladen pengembangan. Full description
\n\n\n\n\nDenial-of-service melalui penampilan pernyataan regular patologi. Full description
\n\n\n\n\n\n\n\n\nXSS melalui nama-nama tidak dibersihkan dari berkas-berkas terunggah. Full description
\n\n\n\n\nLintasan-direktori pada Windows melalui penanganan pemisah-jalur tidak benar. Full description
\n\n\n\n\nManipulasi sesi ketika menggunakan sesi backend-cache-memori. Full description
\n\n\n\n\n\nPengeluaran permintaan kebocoran/berubah-ubah informasi melalui URLField.verify_exists. Full description
\n\n\n\n\n\nKemungkinan CSRF melalui kepala Host. Full description
\n\n\nPemberitahuan ini hanya saran, jadi tidak ada tambalan diterbitkan.
\n\nDjango 1.2
Django 1.3
\n\n\n\n\nXSS melalui kegagalan untuk mensahkan skema pengalihan. Full description
\n\n\n\n\nDenial-of-service melalui berkas-berkas gambar termampatkan. Full description
\n\n\n\n\n\n\n\n\n\nSerangan berdasarkan-masukan terhadap pustaka XML Python. Full description
\n\n\n\n\n\n\n\nKemungkinan XSS melalui skema pengalihan URL tidak disahkan. Full description
\n\n\n\n\n\n\nPengerjaan kode tidak diharapkan menggunakan reverse(). Full description
\n\n\n\n\n\nTypecast MySQL menyebabkan hasil permintaan yang tidak diharapkan. Full description
\n\n\n\n\nTembolok mungkin diizinkan untuk menyimpan dan melayani data pribadi. Full description
\n\n\n\n\n\nreverse()` dapat membangkitkan URL menunjuk ke rumah lain. Full description
\n\n\n\n\n\n\nKebocoran data melalui memanipulasi querystring di admin. Full description
\n\n\n\n\nMenipu kepala WSGI melalui garis bawah/penggabungan tanda garis. Full description
\n\n\n\n\nDikurangi kemungkinan serangan XSS melalui URL pengalihan diberikan-pengguna. Full description
\n\n\n\n\nSerangan denial-of-service terhadap django.views.static.serve(). Full description
\n\n\n\n\nDenial-of-service basisdata dengan ModelMultipleChoiceField. Full description
\n\n\n\n\nSerangan XSS melalui sifat di ModelAdmin.readonly_fields. Full description
\n\n\n\n\n\nDikurangi kemungkinan serangan XSS melalui URL pengalihan diberikan-pengguna. Full description
\n\n\n\n\n\nKemungkinan denial-of-service dengan mengisi toko sesi. Full description
\n\n\n\n\nKemungkinan suntikan kepala sejak pengesah menerima baris baru di masukan. Full description
\n\n\n\n\n\nKemungkinan denial-of-service di tampilan logout() dengan mengisi toko sesi. Full description
\n\n\n\n\n\nPengguna dengan "change" tetapi tidak "add" perizinan dapat membuat obyek untuk ModelAdmin dengan save_as=True. Full description
\n\n\n\n\nPengalihan dan kemungkinsn serangan XSS jelek melalui URL pengalihan diberikan-pengguna mengandung autentifikasi dasar. Full description
\n\n\n\n\nPendaftaran pengguna melalui perbedaan pewaktu pada peningkatan faktor pekerjaan pengacak sandi. Full description
\n\n\n\n\n\nPemotongan perlindungan CSRF pada situs dengan Google Analytics. Full description
\n\n\n\n\nPengguna dengan sandi kode keras sandi dibuat ketika menjalankan percobaan pada Oracle. Full description
\n\n\n\n\n\nOpen redirect and possible XSS attack via user-supplied numeric redirect URLs.\nFull description
\n\n\n\n\nOpen redirect vulnerability in django.views.static.serve(). Full\ndescription
\n\n\n\n\nPossible XSS in traceback section of technical 500 debug page. Full\ndescription
\n\n\n","rootId":"archive-of-security-issues","toc":[{"title":"Masalah-masalah pada sebelum pengolahan keamanan Django","anchor":"issues-prior-to-django-s-security-process","children":[{"title":"16 Agustus 2006 - CVE 2007-0404","anchor":"august-16-2006-cve-2007-0404","children":[{"title":"Versi terpengaruh","anchor":"versions-affected","children":[]}]},{"title":"21 Januari 2007 - CVE 2007-0405","anchor":"january-21-2007-cve-2007-0405","children":[{"title":"Versi terpengaruh","anchor":"id1","children":[]}]}]},{"title":"Masalah dibawah pengolahan keamanan Django","anchor":"issues-under-django-s-security-process","children":[{"title":"26 Oktober 2007 - CVE 2007-5712","anchor":"october-26-2007-cve-2007-5712","children":[{"title":"Versi terpengaruh","anchor":"id2","children":[]}]},{"title":"14 mei 2008 - CVE 2008-2302","anchor":"may-14-2008-cve-2008-2302","children":[{"title":"Versi terpengaruh","anchor":"id3","children":[]}]},{"title":"2 September 2008 - CVE 2008-3909","anchor":"september-2-2008-cve-2008-3909","children":[{"title":"Versi terpengaruh","anchor":"id4","children":[]}]},{"title":"28 Juli 2009 - CVE 2009-2659","anchor":"july-28-2009-cve-2009-2659","children":[{"title":"Versi terpengaruh","anchor":"id5","children":[]}]},{"title":"9 Oktober 2009 - CVE 2009-3965","anchor":"october-9-2009-cve-2009-3965","children":[{"title":"Versi terpengaruh","anchor":"id6","children":[]}]},{"title":"8 September 2010 - CVE 2010-3082","anchor":"september-8-2010-cve-2010-3082","children":[{"title":"Versi terpengaruh","anchor":"id7","children":[]}]},{"title":"22 Desember 2010 - CVE 2010-4534","anchor":"december-22-2010-cve-2010-4534","children":[{"title":"Versi terpengaruh","anchor":"id8","children":[]}]},{"title":"22 Desember 2010 - CVE 2010-4535","anchor":"december-22-2010-cve-2010-4535","children":[{"title":"Versi terpengaruh","anchor":"id9","children":[]}]},{"title":"8 Februari 2011 - CVE 2011-0696","anchor":"february-8-2011-cve-2011-0696","children":[{"title":"Versi terpengaruh","anchor":"id10","children":[]}]},{"title":"8 Februari 2011 - CVE 2011-0697","anchor":"february-8-2011-cve-2011-0697","children":[{"title":"Versi terpengaruh","anchor":"id11","children":[]}]},{"title":"8 Februari 2011 - CVE 2011-0698","anchor":"february-8-2011-cve-2011-0698","children":[{"title":"Versi terpengaruh","anchor":"id12","children":[]}]},{"title":"9 September 2011 - CVE 2011-4136","anchor":"september-9-2011-cve-2011-4136","children":[{"title":"Versi terpengaruh","anchor":"id13","children":[]}]},{"title":"9 September 2011 - CVE 2011-4137","anchor":"september-9-2011-cve-2011-4137","children":[{"title":"Versi terpengaruh","anchor":"id14","children":[]}]},{"title":"9 September 2011 - CVE 2011-4138","anchor":"september-9-2011-cve-2011-4138","children":[{"title":"Versi terpengaruh","anchor":"id15","children":[]}]},{"title":"9 September 2011 - CVE 2011-4139","anchor":"september-9-2011-cve-2011-4139","children":[{"title":"Versi terpengaruh","anchor":"id16","children":[]}]},{"title":"9 September 2011 - CVE 2011-4140","anchor":"september-9-2011-cve-2011-4140","children":[{"title":"Versi terpengaruh","anchor":"id17","children":[]}]},{"title":"30 Juli 2012 - CVE 2012-3442","anchor":"july-30-2012-cve-2012-3442","children":[{"title":"Versi terpengaruh","anchor":"id18","children":[]}]},{"title":"30 Juli 2012 - CVE 2012-3443","anchor":"july-30-2012-cve-2012-3443","children":[{"title":"Versi terpengaruh","anchor":"id19","children":[]}]},{"title":"30 Juli 2012 - CVE 2012-3444","anchor":"july-30-2012-cve-2012-3444","children":[{"title":"Versi terpengaruh","anchor":"id20","children":[]}]},{"title":"17 Oktober 2012 - CVE 2012-4520","anchor":"october-17-2012-cve-2012-4520","children":[{"title":"Versi terpengaruh","anchor":"id21","children":[]}]},{"title":"Desember 10, 2012 - No CVE 1","anchor":"december-10-2012-no-cve-1","children":[{"title":"Versi terpengaruh","anchor":"id22","children":[]}]},{"title":"Desember 10, 2012 - No CVE 2","anchor":"december-10-2012-no-cve-2","children":[{"title":"Versi terpengaruh","anchor":"id23","children":[]}]},{"title":"Februari 19, 2013 - No CVE","anchor":"february-19-2013-no-cve","children":[{"title":"Versi terpengaruh","anchor":"id24","children":[]}]},{"title":"19 Februari 2013 - CVE 2013-1664 / CVE 2013-1665","anchor":"february-19-2013-cve-2013-1664-cve-2013-1665","children":[{"title":"Versi terpengaruh","anchor":"id25","children":[]}]},{"title":"19 Februari 2013 - CVE 2013-0305","anchor":"february-19-2013-cve-2013-0305","children":[{"title":"Versi terpengaruh","anchor":"id26","children":[]}]},{"title":"19 Februari 2013 - CVE 2013-0306","anchor":"february-19-2013-cve-2013-0306","children":[{"title":"Versi terpengaruh","anchor":"id27","children":[]}]},{"title":"13 Agustus 2013 - CVE 2013-4249","anchor":"august-13-2013-cve-2013-4249","children":[{"title":"Versi terpengaruh","anchor":"id28","children":[]}]},{"title":"13 Agustus 2013 - CVE 2013-6044","anchor":"august-13-2013-cve-2013-6044","children":[{"title":"Versi terpengaruh","anchor":"id29","children":[]}]},{"title":"10 September 2013 - CVE 2013-4315","anchor":"september-10-2013-cve-2013-4315","children":[{"title":"Versi terpengaruh","anchor":"id30","children":[]}]},{"title":"14 September 2013 - CVE 2013-1443","anchor":"september-14-2013-cve-2013-1443","children":[{"title":"Versi terpengaruh","anchor":"id31","children":[]}]},{"title":"21 April 2014 - CVE 2014-0472","anchor":"april-21-2014-cve-2014-0472","children":[{"title":"Versi terpengaruh","anchor":"id32","children":[]}]},{"title":"21 April 2014 - CVE 2014-0473","anchor":"april-21-2014-cve-2014-0473","children":[{"title":"Versi terpengaruh","anchor":"id33","children":[]}]},{"title":"21 April 2014 - CVE 2014-0474","anchor":"april-21-2014-cve-2014-0474","children":[{"title":"Versi terpengaruh","anchor":"id34","children":[]}]},{"title":"18 Mei 2014 - CVE 2014-1418","anchor":"may-18-2014-cve-2014-1418","children":[{"title":"Versi terpengaruh","anchor":"id35","children":[]}]},{"title":"18 Mei 2014 - CVE 2014-3730","anchor":"may-18-2014-cve-2014-3730","children":[{"title":"Versi terpengaruh","anchor":"id36","children":[]}]},{"title":"20 Agustus 2014 - CVE 2014-0480","anchor":"august-20-2014-cve-2014-0480","children":[{"title":"Versi terpengaruh","anchor":"id37","children":[]}]},{"title":"20 Agustus 2014 - CVE 2014-0481","anchor":"august-20-2014-cve-2014-0481","children":[{"title":"Versi terpengaruh","anchor":"id38","children":[]}]},{"title":"20 Agustus 2014 - CVE 2014-0482","anchor":"august-20-2014-cve-2014-0482","children":[{"title":"Versi terpengaruh","anchor":"id39","children":[]}]},{"title":"20 Agustus 2014 - CVE 2014-0483","anchor":"august-20-2014-cve-2014-0483","children":[{"title":"Versi terpengaruh","anchor":"id40","children":[]}]},{"title":"13 Januari 2015 - CVE 2015-0219","anchor":"january-13-2015-cve-2015-0219","children":[{"title":"Versi terpengaruh","anchor":"id41","children":[]}]},{"title":"13 Januari 2015 - CVE 2015-0220","anchor":"january-13-2015-cve-2015-0220","children":[{"title":"Versi terpengaruh","anchor":"id42","children":[]}]},{"title":"13 Januari 2015 - CVE 2015-0221","anchor":"january-13-2015-cve-2015-0221","children":[{"title":"Versi terpengaruh","anchor":"id43","children":[]}]},{"title":"13 januari 2015 - CVE 2015-0222","anchor":"january-13-2015-cve-2015-0222","children":[{"title":"Versi terpengaruh","anchor":"id44","children":[]}]},{"title":"9 Maret 2015 - CVE 2015-2241","anchor":"march-9-2015-cve-2015-2241","children":[{"title":"Versi terpengaruh","anchor":"id45","children":[]}]},{"title":"18 Maret 2015 - CVE 2015-2316","anchor":"march-18-2015-cve-2015-2316","children":[{"title":"Versi terpengaruh","anchor":"id46","children":[]}]},{"title":"18 Maret 2015 - CVE 2015-2317","anchor":"march-18-2015-cve-2015-2317","children":[{"title":"Versi terpengaruh","anchor":"id47","children":[]}]},{"title":"20 Mei 2015 - CVE 2015-3982","anchor":"may-20-2015-cve-2015-3982","children":[{"title":"Versi terpengaruh","anchor":"id48","children":[]}]},{"title":"8 Juli 2015 - CVE 2015-5143","anchor":"july-8-2015-cve-2015-5143","children":[{"title":"Versi terpengaruh","anchor":"id49","children":[]}]},{"title":"8 Juli 2015 - CVE 2015-5144","anchor":"july-8-2015-cve-2015-5144","children":[{"title":"Versi terpengaruh","anchor":"id50","children":[]}]},{"title":"8 Juli 2015 - CVE 2015-5145","anchor":"july-8-2015-cve-2015-5145","children":[{"title":"Versi terpengaruh","anchor":"id51","children":[]}]},{"title":"18 Agustus 2015 - CVE 2015-5963 / CVE 2015-5964","anchor":"august-18-2015-cve-2015-5963-cve-2015-5964","children":[{"title":"Versi terpengaruh","anchor":"id52","children":[]}]},{"title":"24 November 2015 - CVE 2015-8213","anchor":"november-24-2015-cve-2015-8213","children":[{"title":"Versi terpengaruh","anchor":"id53","children":[]}]},{"title":"1 Februari 2016 - CVE 2016-2048","anchor":"february-1-2016-cve-2016-2048","children":[{"title":"Versi terpengaruh","anchor":"id54","children":[]}]},{"title":"1 Maret 2016 - CVE 2016-2512","anchor":"march-1-2016-cve-2016-2512","children":[{"title":"Versi terpengaruh","anchor":"id55","children":[]}]},{"title":"1 Maret 2016 - CVE 2016-2513","anchor":"march-1-2016-cve-2016-2513","children":[{"title":"Versi terpengaruh","anchor":"id56","children":[]}]},{"title":"18 Juli 2016 - CVE 2016-6186","anchor":"july-18-2016-cve-2016-6186","children":[{"title":"Versi terpengaruh","anchor":"id57","children":[]}]},{"title":"26 September 2016 - CVE 2016-7401","anchor":"september-26-2016-cve-2016-7401","children":[{"title":"Versi terpengaruh","anchor":"id58","children":[]}]},{"title":"1 November 2016 - CVE 2016-9013","anchor":"november-1-2016-cve-2016-9013","children":[{"title":"Versi terpengaruh","anchor":"id59","children":[]}]},{"title":"1 November 2016 - CVE 2016-9014","anchor":"november-1-2016-cve-2016-9014","children":[{"title":"Versi terpengaruh","anchor":"id60","children":[]}]},{"title":"April 4, 2017 - CVE 2017-7233","anchor":"april-4-2017-cve-2017-7233","children":[{"title":"Versi terpengaruh","anchor":"id61","children":[]}]},{"title":"April 4, 2017 - CVE 2017-7234","anchor":"april-4-2017-cve-2017-7234","children":[{"title":"Versi terpengaruh","anchor":"id62","children":[]}]},{"title":"September 5, 2017 - CVE 2017-12794","anchor":"september-5-2017-cve-2017-12794","children":[{"title":"Versi terpengaruh","anchor":"id63","children":[]}]}]}],"breadcrumbs":[{"docname":"releases/index","title":"Catatan terbitan","url":"/id/1.10/releases/"}],"prev":{"docname":"releases/0.95","title":"Catatan terbitan Django versi 0.95","url":"/id/1.10/releases/0.95/"},"next":{"docname":"internals/index","title":"Dalam Django","url":"/id/1.10/internals/"},"formats":{"html":"/id/1.10/releases/security/","markdown":"/id/1.10/releases/security.md","json":"/id/1.10/releases/security.json"},"source":"https://github.com/django/django/blob/stable/1.10.x/docs/releases/security.txt","official":"https://docs.djangoproject.com/id/1.10/releases/security/","inVersions":["6.1","6.0","5.2","5.1","5.0","4.2","4.1","4.0","3.2","3.1","3.0","2.2","2.1","2.0","1.11","1.10","1.9"],"inLocales":["en","fr","ja","id","pt-br","es","el","pl"]}