Djangoproject

Django

123 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2010-4535

  • EPSS 4.75%
  • Published 10.01.2011 20:00:16
  • Last modified 11.04.2025 00:51:21

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial ...

4.3

CVE-2010-3082

  • EPSS 0.41%
  • Published 14.09.2010 19:00:02
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.

5

CVE-2009-3695

  • EPSS 6.2%
  • Published 13.10.2009 10:30:00
  • Last modified 09.04.2025 00:30:58

Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that t...