Skip to content
OpenAdvisories

Vendor

thiagopena

2 known vulnerabilities.

Products

djangoSIGE 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-64821

    djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views

    djangoSIGE through 1.10 (commit a6fe7e8) contains a cross-site request forgery vulnerability that allows unauthenticated attackers to cancel sales or purchase orders on behalf of authenticated users by exploiting order-cancellation logic implemented inside HT…

    thiagopena djangoSIGE
  • Medium 5.3
    CVE-2026-64822

    djangoSIGE 1.10 User Enumeration via ForgotPasswordView

    djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within djangosige/apps/login/views.py that allows unauthenticated attackers to identify valid accounts by observing distinct error messages returned by th…

    thiagopena djangoSIGE