django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors.
CVSS 2.0MEDIUM 5.0·Network·No auth·Interaction —·EPSS 0.01829·Published 2015-04-24·Fixed in 1.3.2CWE-200