Количество 9
Количество 9
GHSA-pwjp-ccjc-ghwg
Django vulnerable to privilege abuse in GenericInlineModelAdmin
CVE-2026-4277
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged `POST` data in `GenericInlineModelAdmin`. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank N05ec@LZU-DSLab for reporting this issue.
CVE-2026-4277
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged `POST` data in `GenericInlineModelAdmin`. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank N05ec@LZU-DSLab for reporting this issue.
CVE-2026-4277
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged `POST` data in `GenericInlineModelAdmin`. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank N05ec@LZU-DSLab for reporting this issue.
CVE-2026-4277
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4. ...
BDU:2026-07723
Уязвимость класса GenericInlineModelAdmin фреймворка для веб-разработки Django, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260513-73-0013
Уязвимость python-django
openSUSE-SU-2026:20578-1
Security update for python-Django
SUSE-SU-2026:1740-1
Security update for python-Django
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-pwjp-ccjc-ghwg Django vulnerable to privilege abuse in GenericInlineModelAdmin | 0% Низкий | 4 месяца назад | |
 | CVE-2026-4277 An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged `POST` data in `GenericInlineModelAdmin`. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank N05ec@LZU-DSLab for reporting this issue. | CVSS3: 9.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-4277 An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged `POST` data in `GenericInlineModelAdmin`. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank N05ec@LZU-DSLab for reporting this issue. | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
 | CVE-2026-4277 An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged `POST` data in `GenericInlineModelAdmin`. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank N05ec@LZU-DSLab for reporting this issue. | CVSS3: 9.8 | 0% Низкий | 4 месяца назад |
| CVE-2026-4277 An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4. ... | CVSS3: 9.8 | 0% Низкий | 4 месяца назад |
 | BDU:2026-07723 Уязвимость класса GenericInlineModelAdmin фреймворка для веб-разработки Django, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 9.8 | 0% Низкий | 4 месяца назад |
 | ROS-20260513-73-0013 Уязвимость python-django | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:20578-1 Security update for python-Django | 4 месяца назад | ||
| SUSE-SU-2026:1740-1 Security update for python-Django | 3 месяца назад |
Уязвимостей на страницу