セキュリティ上の問題のアーカイブLink to this heading#

February 14, 2023 - CVE 2023-24580Link to this heading#

Potential denial-of-service vulnerability in file uploads. Full description

• Django 4.1 (patch)

• Django 4.0 (patch)

• Django 3.2 (patch)

February 1, 2023 - CVE 2023-23969Link to this heading#

Potential denial-of-service via Accept-Language headers. Full description

• Django 4.1 (patch)

• Django 4.0 (patch)

• Django 3.2 (patch)

October 4, 2022 - CVE 2022-41323Link to this heading#

Potential denial-of-service vulnerability in internationalized URLs. Full description

• Django 4.1 (patch)

• Django 4.0 (patch)

• Django 3.2 (patch)

August 3, 2022 - CVE 2022-36359Link to this heading#

Potential reflected file download vulnerability in FileResponse. Full description

• Django 4.0 (patch)

• Django 3.2 (patch)

July 4, 2022 - CVE 2022-34265Link to this heading#

Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments. Full description

• Django 4.0 (patch)

• Django 3.2 (patch)

April 11, 2022 - CVE 2022-28346Link to this heading#

Potential SQL injection in QuerySet.annotate(), aggregate(), and extra(). Full description

• Django 4.0 (patch)

• Django 3.2 (patch)

• Django 2.2 (patch)

April 11, 2022 - CVE 2022-28347Link to this heading#

Potential SQL injection via QuerySet.explain(**options) on PostgreSQL. Full description

• Django 4.0 (patch)

• Django 3.2 (patch)

• Django 2.2 (patch)

February 1, 2022 - CVE 2022-22818Link to this heading#

Possible XSS via {% debug %} template tag. Full description

February 1, 2022 - CVE 2022-23833Link to this heading#

Denial-of-service possibility in file uploads. Full description

January 4, 2022 - CVE 2021-45452Link to this heading#

Potential directory-traversal via Storage.save(). Full description

January 4, 2022 - CVE 2021-45116Link to this heading#

Potential information disclosure in dictsort template filter. Full description

January 4, 2022 - CVE 2021-45115Link to this heading#

Denial-of-service possibility in UserAttributeSimilarityValidator. Full description

December 7, 2021 - CVE 2021-44420Link to this heading#

Potential bypass of an upstream access control based on URL paths. Full description

July 1, 2021 - CVE 2021-35042Link to this heading#

Potential SQL injection via unsanitized QuerySet.order_by() input. Full description

June 2, 2021 - CVE 2021-33203Link to this heading#

Potential directory traversal via admindocs. Full description

June 2, 2021 - CVE 2021-33571Link to this heading#

Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses. Full description

May 6, 2021 - CVE 2021-32052Link to this heading#

Header injection possibility since URLValidator accepted newlines in input on Python 3.9.5+. Full description

May 4, 2021 - CVE 2021-31542Link to this heading#

Potential directory-traversal via uploaded files. Full description

April 6, 2021 - CVE 2021-28658Link to this heading#

Potential directory-traversal via uploaded files. Full description

February 19, 2021 - CVE 2021-23336Link to this heading#

Web cache poisoning via django.utils.http.limited_parse_qsl(). Full description

February 1, 2021 - CVE 2021-3281Link to this heading#

Potential directory-traversal via archive.extract(). Full description

September 1, 2020 - CVE 2020-24584Link to this heading#

Permission escalation in intermediate-level directories of the file system cache on Python 3.7+. Full description

September 1, 2020 - CVE 2020-24583Link to this heading#

Incorrect permissions on intermediate-level directories on Python 3.7+. Full description

June 3, 2020 - CVE 2020-13596Link to this heading#

Possible XSS via admin ForeignKeyRawIdWidget. Full description

June 3, 2020 - CVE 2020-13254Link to this heading#

Potential data leakage via malformed memcached keys. Full description

March 4, 2020 - CVE 2020-9402Link to this heading#

Potential SQL injection via tolerance parameter in GIS functions and aggregates on Oracle. Full description

February 3, 2020 - CVE 2020-7471Link to this heading#

StringAgg(delimiter) を通じた潜在的 SQL インジェクション. ` <https://www.djangoproject.com/weblog/2020/feb/03/security-releases/>`__

December 18, 2019 - CVE 2019-19844Link to this heading#

Potential account hijack via password reset form. Full description

December 2, 2019 - CVE 2019-19118Link to this heading#

Privilege escalation in the Django admin. Full description

2019年8月1日 - CVE 2019-14235Link to this heading#

django.utils.encoding.uri_to_iri() におけるメモリ枯渇の可能性。詳細な説明

August 1, 2019 - CVE 2019-14234Link to this heading#

SQL injection possibility in key and index lookups for JSONField/HStoreField. Full description

August 1, 2019 - CVE 2019-14233Link to this heading#

Denial-of-service possibility in strip_tags(). Full description

August 1, 2019 - CVE 2019-14232Link to this heading#

Denial-of-service possibility in django.utils.text.Truncator. Full description

July 1, 2019 - CVE 2019-12781Link to this heading#

Incorrect HTTP detection with reverse-proxy connecting via HTTPS. Full description

June 3, 2019 - CVE 2019-12308Link to this heading#

XSS via "Current URL" link generated by AdminURLFieldWidget. Full description

June 3, 2019 - CVE 2019-11358Link to this heading#

Prototype pollution in bundled jQuery. Full description

2019年2月11日 - CVE 2019-6975Link to this heading#

django.utils.numberformat.format() におけるメモリ枯渇の問題。詳細な説明

2019年1月4日 - CVE 2019-3498Link to this heading#

デフォルトの 404 ページにおけるコンテンツスプーフィングの可能性。詳細な説明

2018年10月1日 - CVE 2018-16984Link to this heading#

Password hash disclosure to 「表示のみ (view only)」の admin ユーザーにパスワードのハッシュが意図せず公開されてしまう問題。詳細な説明

2018年8月1日 - CVE 2018-14574Link to this heading#

CommonMiddleware におけるオープンリダイレクトの可能性。詳細な説明

2018年3月6日 - CVE 2018-7537Link to this heading#

truncatechars_html と truncatewords_html テンプレートフィルタにおけるDoS 攻撃の可能性。 詳細な説明

2018年3月6日 - CVE 2018-7536Link to this heading#

urlize と urlizetrunc テンプレートフィルタにおける DoS 攻撃の可能性。詳細な説明

2018年2月1日 - CVE 2018-6188Link to this heading#

AuthenticationForm における情報漏えい問題。詳細な説明

2017年9月5日 - CVE 2017-12794Link to this heading#

Possible XSS in traceback section of technical 500 debug page. Full description

April 4, 2017 - CVE 2017-7234Link to this heading#

Open redirect vulnerability in django.views.static.serve(). Full description

April 4, 2017 - CVE 2017-7233Link to this heading#

Open redirect and possible XSS attack via user-supplied numeric redirect URLs. Full description

November 1, 2016 - CVE 2016-9014Link to this heading#

DNS rebinding vulnerability when DEBUG=True. Full description

November 1, 2016 - CVE 2016-9013Link to this heading#

User with hardcoded password created when running tests on Oracle. Full description

September 26, 2016 - CVE 2016-7401Link to this heading#

CSRF protection bypass on a site with Google Analytics. Full description

July 18, 2016 - CVE 2016-6186Link to this heading#

XSS in admin's add/change related popup. Full description

March 1, 2016 - CVE 2016-2513Link to this heading#

User enumeration through timing difference on password hasher work factor upgrade. Full description

March 1, 2016 - CVE 2016-2512Link to this heading#

Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth. Full description

February 1, 2016 - CVE 2016-2048Link to this heading#

User with "change" but not "add" permission can create objects for ModelAdmin’s with save_as=True. Full description

November 24, 2015 - CVE 2015-8213Link to this heading#

Settings leak possibility in date template filter. Full description

August 18, 2015 - CVE 2015-5963 / CVE 2015-5964Link to this heading#

Denial-of-service possibility in logout() view by filling session store. Full description

July 8, 2015 - CVE 2015-5145Link to this heading#

Denial-of-service possibility in URL validation. Full description

July 8, 2015 - CVE 2015-5144Link to this heading#

Header injection possibility since validators accept newlines in input. Full description

July 8, 2015 - CVE 2015-5143Link to this heading#

Denial-of-service possibility by filling session store. Full description

May 20, 2015 - CVE 2015-3982Link to this heading#

Fixed session flushing in the cached_db backend. Full description

March 18, 2015 - CVE 2015-2317Link to this heading#

Mitigated possible XSS attack via user-supplied redirect URLs. Full description

March 18, 2015 - CVE 2015-2316Link to this heading#

Denial-of-service possibility with strip_tags(). Full description

March 9, 2015 - CVE 2015-2241Link to this heading#

XSS attack via properties in ModelAdmin.readonly_fields. Full description

January 13, 2015 - CVE 2015-0222Link to this heading#

Database denial-of-service with ModelMultipleChoiceField. Full description

January 13, 2015 - CVE 2015-0221Link to this heading#

Denial-of-service attack against django.views.static.serve(). Full description

January 13, 2015 - CVE 2015-0220Link to this heading#

Mitigated possible XSS attack via user-supplied redirect URLs. Full description

January 13, 2015 - CVE 2015-0219Link to this heading#

WSGI header spoofing via underscore/dash conflation. Full description

August 20, 2014 - CVE 2014-0483Link to this heading#

Data leakage via querystring manipulation in admin. Full description

August 20, 2014 - CVE 2014-0482Link to this heading#

RemoteUserMiddleware session hijacking. Full description

August 20, 2014 - CVE 2014-0481Link to this heading#

File upload denial of service. Full description

August 20, 2014 - CVE 2014-0480Link to this heading#

reverse() can generate URLs pointing to other hosts. Full description

May 18, 2014 - CVE 2014-3730Link to this heading#

Malformed URLs from user input incorrectly validated. Full description

May 18, 2014 - CVE 2014-1418Link to this heading#

Caches may be allowed to store and serve private data. Full description

April 21, 2014 - CVE 2014-0474Link to this heading#

MySQL typecasting causes unexpected query results. Full description

April 21, 2014 - CVE 2014-0473Link to this heading#

Caching of anonymous pages could reveal CSRF token. Full description

April 21, 2014 - CVE 2014-0472Link to this heading#

Unexpected code execution using reverse(). Full description

September 14, 2013 - CVE 2013-1443Link to this heading#

Denial-of-service via large passwords. Full description

September 10, 2013 - CVE 2013-4315Link to this heading#

Directory-traversal via ssi template tag. Full description

August 13, 2013 - CVE 2013-6044Link to this heading#

Possible XSS via unvalidated URL redirect schemes. Full description

August 13, 2013 - CVE 2013-4249Link to this heading#

XSS via admin trusting URLField values. Full description

February 19, 2013 - CVE 2013-0306Link to this heading#

Denial-of-service via formset max_num bypass. Full description

February 19, 2013 - CVE 2013-0305Link to this heading#

Information leakage via admin history log. Full description

February 19, 2013 - CVE 2013-1664 / CVE 2013-1665Link to this heading#

Entity-based attacks against Python XML libraries. Full description

February 19, 2013 - No CVELink to this heading#

Additional hardening of Host header handling. Full description

December 10, 2012 - No CVE 2Link to this heading#

Additional hardening of redirect validation. Full description

December 10, 2012 - No CVE 1Link to this heading#

Additional hardening of Host header handling. Full description

October 17, 2012 - CVE 2012-4520Link to this heading#

Host header poisoning. Full description

July 30, 2012 - CVE 2012-3444Link to this heading#

Denial-of-service via large image files. Full description

July 30, 2012 - CVE 2012-3443Link to this heading#

Denial-of-service via compressed image files. Full description

July 30, 2012 - CVE 2012-3442Link to this heading#

XSS via failure to validate redirect scheme. Full description

September 9, 2011 - CVE 2011-4140Link to this heading#

Potential CSRF via Host header. Full description

September 9, 2011 - CVE 2011-4139Link to this heading#

Host header cache poisoning. Full description

September 9, 2011 - CVE 2011-4138Link to this heading#

Information leakage/arbitrary request issuance via URLField.verify_exists. Full description

September 9, 2011 - CVE 2011-4137Link to this heading#

Denial-of-service via URLField.verify_exists. Full description

September 9, 2011 - CVE 2011-4136Link to this heading#

Session manipulation when using memory-cache-backed session. Full description

February 8, 2011 - CVE 2011-0698Link to this heading#

Directory-traversal on Windows via incorrect path-separator handling. Full description

February 8, 2011 - CVE 2011-0697Link to this heading#

XSS via unsanitized names of uploaded files. Full description

February 8, 2011 - CVE 2011-0696Link to this heading#

CSRF via forged HTTP headers. Full description

December 22, 2010 - CVE 2010-4535Link to this heading#

Denial-of-service in password-reset mechanism. Full description

December 22, 2010 - CVE 2010-4534Link to this heading#

Information leakage in administrative interface. Full description

September 8, 2010 - CVE 2010-3082Link to this heading#

XSS via trusting unsafe cookie value. Full description

October 9, 2009 - CVE 2009-3965Link to this heading#

Denial-of-service via pathological regular expression performance. Full description

July 28, 2009 - CVE 2009-2659Link to this heading#

Directory-traversal in development server media handler. Full description

September 2, 2008 - CVE 2008-3909Link to this heading#

CSRF via preservation of POST data during admin login. Full description

May 14, 2008 - CVE 2008-2302Link to this heading#

XSS via admin login redirect. Full description

October 26, 2007 - CVE 2007-5712Link to this heading#

Denial-of-service via arbitrarily-large Accept-Language header. Full description

January 21, 2007 - CVE 2007-0405Link to this heading#

Apparent "caching" of authenticated user. Full description

2006年8月16日 - CVE 2007-0404Link to this heading#

翻訳フレームワークにおけるファイル名の検証問題。 詳細な説明