Archive
7 December 2015
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Low 2.8
Django settings leak in date template filter
The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as de…
-
Low 3.1
Symfony Session Fixation Vulnerability
Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.