Количество 9
Количество 9
GHSA-mmwr-2jhp-mc7j
Django vulnerable to privilege abuse in ModelAdmin.list_editable
CVE-2026-4292
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using `ModelAdmin.list_editable` incorrectly allowed new instances to be created via forged `POST` data. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Cantina for reporting this issue.
CVE-2026-4292
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using `ModelAdmin.list_editable` incorrectly allowed new instances to be created via forged `POST` data. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Cantina for reporting this issue.
CVE-2026-4292
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using `ModelAdmin.list_editable` incorrectly allowed new instances to be created via forged `POST` data. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Cantina for reporting this issue.
CVE-2026-4292
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4. ...
BDU:2026-07724
Уязвимость фреймворка для веб-разработки Django, связанная с недостатками процедуры авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260513-73-0014
Уязвимость python-django
openSUSE-SU-2026:20578-1
Security update for python-Django
SUSE-SU-2026:1740-1
Security update for python-Django
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-mmwr-2jhp-mc7j Django vulnerable to privilege abuse in ModelAdmin.list_editable | CVSS3: 2.7 | 0% Низкий | 4 месяца назад |
 | CVE-2026-4292 An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using `ModelAdmin.list_editable` incorrectly allowed new instances to be created via forged `POST` data. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Cantina for reporting this issue. | CVSS3: 2.7 | 0% Низкий | 4 месяца назад |
 | CVE-2026-4292 An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using `ModelAdmin.list_editable` incorrectly allowed new instances to be created via forged `POST` data. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Cantina for reporting this issue. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-4292 An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using `ModelAdmin.list_editable` incorrectly allowed new instances to be created via forged `POST` data. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Cantina for reporting this issue. | CVSS3: 2.7 | 0% Низкий | 4 месяца назад |
| CVE-2026-4292 An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4. ... | CVSS3: 2.7 | 0% Низкий | 4 месяца назад |
 | BDU:2026-07724 Уязвимость фреймворка для веб-разработки Django, связанная с недостатками процедуры авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 2.7 | 0% Низкий | 4 месяца назад |
 | ROS-20260513-73-0014 Уязвимость python-django | CVSS3: 2.7 | 0% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:20578-1 Security update for python-Django | 4 месяца назад | ||
| SUSE-SU-2026:1740-1 Security update for python-Django | 3 месяца назад |
Уязвимостей на страницу