Read the docs
Red Hat Security Advisory

RHSA-2014:0457

Django security update

Released 2014-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2014-00453 CVE-2014-0474 · GHSA-wqjj-hx84-v449

The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field…

Priority MEDIUM 51

The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conve…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04845 Published 2014-04-23 Partial fix · 1.4.11, 1.5.6 +1 CWE-399
TI-2014-00451 CVE-2014-0472 · GHSA-rvq6-mrpv-m6rm

The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before…

Priority LOW 32

The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leverag…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.05758 Published 2014-04-23 Partial fix · 1.4.11, 1.5.6 +1 CWE-94
TI-2014-00452 CVE-2014-0473 · GHSA-89hj-xfx5-7q66

The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3…

Priority LOW 27

The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protecti…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01973 Published 2014-04-23 Partial fix · 1.4.11, 1.5.6 +1 CWE-264