Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | python-django | 1.4.5-1+deb7u14 |
| Debian · 8 | python-django | 1.7.7-1+deb8u3 |
Vulnerabilities 1
-
Low 2.8
Django settings leak in date template filter
The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as de…