Skip to content
OpenAdvisories

Package · Debian

django-anymail

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.4
    CVE-2018-1000089

    django-anymail Includes Sensitive Information in Log Files

    Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOK_AUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be ex…

    django-anymail django-anymail Debian PyPI
  • Critical 9.1
    CVE-2018-6596

    Django-Anymail prone to a timing attack

    webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK_AUTHORIZATION secret, which allows remote attackers to post arbitrary e-mail tracking events.

    django-anymail django-anymail Debian PyPI