Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2013-0305

The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.

  • Published: May 2, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-0305
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
djangoproject / django 1.3.1 1.3.1.x
djangoproject / django 1.3 1.3.x
djangoproject / django 1.3.2 1.3.2.x
djangoproject / django 1.3-beta1 1.3-beta1.x
djangoproject / django 1.3-alpha1 1.3-alpha1.x
djangoproject / django 1.3.3 1.3.3.x
djangoproject / django 1.4-alpha 1.4-alpha.x
djangoproject / django 1.4.2 1.4.2.x
djangoproject / django 1.4 1.4.x
djangoproject / django 1.4.1 1.4.1.x
djangoproject / django 1.4-beta 1.4-beta.x
djangoproject / django 1.5-beta 1.5-beta.x
djangoproject / django 1.5-alpha 1.5-alpha.x
canonical / ubuntu_linux 11.10 11.10.x
canonical / ubuntu_linux 12.10 12.10.x
canonical / ubuntu_linux 12.04 12.04.x
canonical / ubuntu_linux 10.04 10.04.x