安全问题档案Link to this heading#

February 14, 2023 - CVE 2023-24580Link to this heading#

Potential denial-of-service vulnerability in file uploads. Full description

• Django 4.1 (patch)

• Django 4.0 (patch)

• Django 3.2 (patch)

February 1, 2023 - CVE 2023-23969Link to this heading#

Potential denial-of-service via Accept-Language headers. Full description

• Django 4.1 (patch)

• Django 4.0 (patch)

• Django 3.2 (patch)

October 4, 2022 - CVE 2022-41323Link to this heading#

Potential denial-of-service vulnerability in internationalized URLs. Full description

• Django 4.1 (patch)

• Django 4.0 (patch)

• Django 3.2 (patch)

August 3, 2022 - CVE 2022-36359Link to this heading#

Potential reflected file download vulnerability in FileResponse. Full description

• Django 4.0 (patch)

• Django 3.2 (patch)

July 4, 2022 - CVE 2022-34265Link to this heading#

Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments. Full description

• Django 4.0 (patch)

• Django 3.2 (patch)

April 11, 2022 - CVE 2022-28346Link to this heading#

Potential SQL injection in QuerySet.annotate(), aggregate(), and extra(). Full description

• Django 4.0 (patch)

• Django 3.2 (patch)

• Django 2.2 (patch)

April 11, 2022 - CVE 2022-28347Link to this heading#

Potential SQL injection via QuerySet.explain(**options) on PostgreSQL. Full description

• Django 4.0 (patch)

• Django 3.2 (patch)

• Django 2.2 (patch)

February 1, 2022 - CVE 2022-22818Link to this heading#

Possible XSS via {% debug %} template tag. Full description

February 1, 2022 - CVE 2022-23833Link to this heading#

Denial-of-service possibility in file uploads. Full description

January 4, 2022 - CVE 2021-45452Link to this heading#

Potential directory-traversal via Storage.save(). Full description

January 4, 2022 - CVE 2021-45116Link to this heading#

Potential information disclosure in dictsort template filter. Full description

January 4, 2022 - CVE 2021-45115Link to this heading#

Denial-of-service possibility in UserAttributeSimilarityValidator. Full description

December 7, 2021 - CVE 2021-44420Link to this heading#

Potential bypass of an upstream access control based on URL paths. Full description

2021 年 7 月 1 日 - CVE 2021-35042Link to this heading#

潜在的 SQL 注入，通过未检验的 QuerySet.order_by() 输入。完整描述

2021 年 6 月 2 日 - CVE 2021-33203Link to this heading#

可能通过 admindocs 进行目录遍历。完整描述

2021 年 6 月 2 日 - CVE 2021-33571Link to this heading#

由于验证器接受 IPv4 地址中的前导零，因此可能出现不确定的 SSRF、RFI 和 LFI 攻击。完整描述

May 6, 2021 - CVE 2021-32052Link to this heading#

Header injection possibility since URLValidator accepted newlines in input on Python 3.9.5+. Full description

2021 年 5 月 4 日 - CVE 2021-31542Link to this heading#

通过上传的文件进行潜在的目录遍历。完整描述

2021 年 4 月 6 日 - CVE 2021-28658Link to this heading#

通过上传的文件进行潜在的目录遍历。完整描述

2021 年 2 月 19 日 - CVE 2021-23336Link to this heading#

通过 django.utils.http.limited_parse_qsl() 进行的网络缓存中毒。完整描述。

2021 年 2 月 1 日 - CVE 2021-3281Link to this heading#

通过 archive.extract() 进行潜在的目录遍历。完整说明

2020 年 9 月 1 日 - CVE 2020-24584Link to this heading#

在 Python 3.7+ 上，文件系统缓存的中间层目录的权限升级。完整说明

2020 年 9 月 1 日 - CVE 2020-24583Link to this heading#

在 Python 3.7+ 上，中间层目录的权限不正确。完整说明

2020 年 6 月 3 日 - CVE 2020-13596Link to this heading#

可能通过管理 ForeignKeyRawIdWidget 进行 XSS。完整说明

2020 年 6 月 3 日 - CVE 2020-13254Link to this heading#

通过畸形的 memcached 密钥可能造成数据泄露。完整说明

2020 年 3 月 4 日 - CVE 2020-9402Link to this heading#

针对 Oracle 数据库， 通过 GIS 函数和聚合函数中的 tolerance 参数带来的潜在 SQL 注入。完整说明

2020 年 2 月 3 日 - CVE 2020-7471Link to this heading#

通过 StringAgg(delimiter) 带来的潜在 SQL 注入。 完整说明

2019 年 12 月 18 日 - CVE 2019-19844Link to this heading#

通过密码重置表单带来的潜在账户劫持。完整说明

2019 年 12 月 2 日 - CVE 2019-19118Link to this heading#

在 Django 管理中的特权提升。完整说明

2019 年 8 月 1 日 - CVE 2019-14235Link to this heading#

在 django.utils.encoding.uri_to_iri() 函数中潜在的内存耗尽。 完整说明

2019 年 8 月 1 日 - CVE 2019-14234Link to this heading#

针对 JSONField ／HStoreField 在键和索引查询时带来的潜在 SQL 注入。 完整说明

2019 年 8 月 1 日 - CVE 2019-14233Link to this heading#

存在于 strip_tags() 函数的拒绝服务攻击。完整说明

2019 年 8 月 1 日 - CVE 2019-14232Link to this heading#

存在于 django.utils.text.Truncator 的拒绝服务攻击。完整说明

2019 年 7 月 1 日 - CVE 2019-12781Link to this heading#

通过 HTTPS 连接反向代理的 HTTP 检测不正确。。完整说明

2019 年 6 月 3 日 - CVE 2019-12308Link to this heading#

由 AdminURLFieldWidget 生成的 “Current URL” 连接引起的跨站脚本漏洞。完整说明

2019 年 6 月 3 日 - CVE 2019-11358Link to this heading#

捆绑 jQuery 的原型污染。完整说明

2019 年 2 月 11 日 - CVE 2019-6975Link to this heading#

django.utils.numberformat.format() 中内存耗尽。完整说明

2019 年 1 月 4 日 - CVE 2019-3498Link to this heading#

默认 404 页面存在内容欺骗的可能。完整说明

2018 年 10 月 1 日 - CVE 2018-16984Link to this heading#

密码哈希值披露给了 “只看” 的管理员用户。完整说明

2018 年 8 月 1 日 - CVE 2018-14574Link to this heading#

在 CommonMiddleware 中开放重定向的可能性。完整说明

2018 年 3 月 6 日 - CVE 2018-7537Link to this heading#

truncatechars_html 和 truncatewords_html 模板过滤器中存在拒绝服务的可能性。完整说明

2018 年 3 月 6 日 - CVE 2018-7536Link to this heading#

urlize 和 urlizetrunc 模板过滤器中存在拒绝服务的可能性。完整说明

2018 年 2 月 1 日 - CVE 2018-6188Link to this heading#

AuthenticationForm 中的信息泄露。完整说明

2017 年 9 月 5 日 - CVE 2017-12794Link to this heading#

在技术 500 调试页面的回溯部分可能存在 XSS。完整说明

2017 年 4 月 4 日 - CVE 2017-7234Link to this heading#

django.views.static.service() 中的开放重定向漏洞。完整说明

2017 年 4 月 4 日 - CVE 2017-7233Link to this heading#

通过用户提供的数字重定向 URL 打开重定向和可能的 XSS 攻击。完整说明

2016 年 11 月 1 日 - CVE 2016-9014Link to this heading#

当 DEBUG=Tr 时，DNS 重绑定漏洞。完整说明

2016 年 11 月 1 日 - CVE 2016-9013Link to this heading#

在 Oracle 上运行测试时创建的带有硬编码密码的用户。完整说明

2016 年 9 月 26 日 - CVE 2016-7401Link to this heading#

在有 Google Analytics 的网站上绕过 CSRF 保护。完整说明

2016 年 7 月 18 日 - CVE 2016-6186Link to this heading#

管理员的添加／更改相关弹窗中的 XSS。完整说明

2016 年 3 月 1 日 - CVE 2016-2513Link to this heading#

通过时间差对密码哈希工作因子升级进行用户枚举。完整说明

2016 年 3 月 1 日 - CVE 2016-2512Link to this heading#

通过用户提供的包含基本认证的重定向 URL 进行恶意重定向和可能的 XSS 攻击。完整说明

2016 年 2 月 1 日 - CVE 2016-2048Link to this heading#

拥有 “变更” 而非 “添加” 权限的用户可以用 “保存为 True” 为 ModelAdmin 创建对象。完整说明

November 24, 2015 - CVE 2015-8213Link to this heading#

Settings leak possibility in date template filter. Full description

August 18, 2015 - CVE 2015-5963 / CVE 2015-5964Link to this heading#

Denial-of-service possibility in logout() view by filling session store. Full description

July 8, 2015 - CVE 2015-5145Link to this heading#

Denial-of-service possibility in URL validation. Full description

July 8, 2015 - CVE 2015-5144Link to this heading#

Header injection possibility since validators accept newlines in input. Full description

July 8, 2015 - CVE 2015-5143Link to this heading#

Denial-of-service possibility by filling session store. Full description

May 20, 2015 - CVE 2015-3982Link to this heading#

Fixed session flushing in the cached_db backend. Full description

March 18, 2015 - CVE 2015-2317Link to this heading#

Mitigated possible XSS attack via user-supplied redirect URLs. Full description

March 18, 2015 - CVE 2015-2316Link to this heading#

Denial-of-service possibility with strip_tags(). Full description

March 9, 2015 - CVE 2015-2241Link to this heading#

XSS attack via properties in ModelAdmin.readonly_fields. Full description

January 13, 2015 - CVE 2015-0222Link to this heading#

Database denial-of-service with ModelMultipleChoiceField. Full description

January 13, 2015 - CVE 2015-0221Link to this heading#

Denial-of-service attack against django.views.static.serve(). Full description

January 13, 2015 - CVE 2015-0220Link to this heading#

Mitigated possible XSS attack via user-supplied redirect URLs. Full description

January 13, 2015 - CVE 2015-0219Link to this heading#

WSGI header spoofing via underscore/dash conflation. Full description

August 20, 2014 - CVE 2014-0483Link to this heading#

Data leakage via querystring manipulation in admin. Full description

August 20, 2014 - CVE 2014-0482Link to this heading#

RemoteUserMiddleware session hijacking. Full description

August 20, 2014 - CVE 2014-0481Link to this heading#

File upload denial of service. Full description

August 20, 2014 - CVE 2014-0480Link to this heading#

reverse() can generate URLs pointing to other hosts. Full description

May 18, 2014 - CVE 2014-3730Link to this heading#

Malformed URLs from user input incorrectly validated. Full description

May 18, 2014 - CVE 2014-1418Link to this heading#

Caches may be allowed to store and serve private data. Full description

April 21, 2014 - CVE 2014-0474Link to this heading#

MySQL typecasting causes unexpected query results. Full description

April 21, 2014 - CVE 2014-0473Link to this heading#

Caching of anonymous pages could reveal CSRF token. Full description

April 21, 2014 - CVE 2014-0472Link to this heading#

Unexpected code execution using reverse(). Full description

September 14, 2013 - CVE 2013-1443Link to this heading#

Denial-of-service via large passwords. Full description

September 10, 2013 - CVE 2013-4315Link to this heading#

Directory-traversal via ssi template tag. Full description

August 13, 2013 - CVE 2013-6044Link to this heading#

Possible XSS via unvalidated URL redirect schemes. Full description

August 13, 2013 - CVE 2013-4249Link to this heading#

XSS via admin trusting URLField values. Full description

February 19, 2013 - CVE 2013-0306Link to this heading#

Denial-of-service via formset max_num bypass. Full description

February 19, 2013 - CVE 2013-0305Link to this heading#

Information leakage via admin history log. Full description

February 19, 2013 - CVE 2013-1664 / CVE 2013-1665Link to this heading#

Entity-based attacks against Python XML libraries. Full description

February 19, 2013 - No CVELink to this heading#

Additional hardening of Host header handling. Full description

December 10, 2012 - No CVE 2Link to this heading#

Additional hardening of redirect validation. Full description

December 10, 2012 - No CVE 1Link to this heading#

Additional hardening of Host header handling. Full description

October 17, 2012 - CVE 2012-4520Link to this heading#

Host header poisoning. Full description

July 30, 2012 - CVE 2012-3444Link to this heading#

Denial-of-service via large image files. Full description

July 30, 2012 - CVE 2012-3443Link to this heading#

Denial-of-service via compressed image files. Full description

July 30, 2012 - CVE 2012-3442Link to this heading#

XSS via failure to validate redirect scheme. Full description

September 9, 2011 - CVE 2011-4140Link to this heading#

Potential CSRF via Host header. Full description

September 9, 2011 - CVE 2011-4139Link to this heading#

Host header cache poisoning. Full description

September 9, 2011 - CVE 2011-4138Link to this heading#

Information leakage/arbitrary request issuance via URLField.verify_exists. Full description

September 9, 2011 - CVE 2011-4137Link to this heading#

Denial-of-service via URLField.verify_exists. Full description

September 9, 2011 - CVE 2011-4136Link to this heading#

Session manipulation when using memory-cache-backed session. Full description

February 8, 2011 - CVE 2011-0698Link to this heading#

Directory-traversal on Windows via incorrect path-separator handling. Full description

February 8, 2011 - CVE 2011-0697Link to this heading#

XSS via unsanitized names of uploaded files. Full description

February 8, 2011 - CVE 2011-0696Link to this heading#

CSRF via forged HTTP headers. Full description

December 22, 2010 - CVE 2010-4535Link to this heading#

Denial-of-service in password-reset mechanism. Full description

December 22, 2010 - CVE 2010-4534Link to this heading#

界面管理中的信息泄漏`完整描述<https://www.djangoproject.com/weblog/2010/dec/22/security/>`__

2010年9月8日 - CVE 2010-3082Link to this heading#

XSS通过信任不安全的cookie值。完整描述<https://www.djangoproject.com/weblog/2010/sep/08/security-release/>`__

2009 年 10 月 9 日 - CVE 2009-3965Link to this heading#

通过缺陷正则表达性能拒绝服务。完整说明

2009 年 7 月 28 日 - CVE 2009-2659Link to this heading#

开发服务器媒体处理程序中的目录遍历。完整说明

2008 年 9 月 2 日 - CVE 2008-3909Link to this heading#

在管理员登录时通过保存 POST 数据进行 CSRF。完整说明

2008 年 5 月 14 日 - CVE 2008-2302Link to this heading#

通过管理员登录重定向进行 XSS。完整说明

2007 年 10 月 26 日 - CVE 2007-5712Link to this heading#

通过任意大的 Accept-Language 头拒绝服务。完整说明

2007 年 1 月 21 日 - CVE 2007-0405Link to this heading#

对认证用户进行明显的 “缓存”。完整说明

2006 年 8 月 16 日 - CVE 2007-0404Link to this heading#

翻译框架中的文件名验证问题。完整说明