Skip to content
OpenAdvisories
Low USN-2816-1 1 CVE

python-django vulnerability

Published Nov 24, 2015 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Ryan Butterfield discovered that Django incorrectly handled the date
template filter. A remote attacker could possibly use this issue to obtain
secrets from application settings.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS python-django 1.6.1-2ubuntu0.11

Vulnerabilities 1

  • Low 2.8
    CVE-2015-8213

    Django settings leak in date template filter

    The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as de…

    python-django django python-django Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2015-8213