Approved changes feed: RSS · Atom
cpe:2.3:a:django_project:django:1.0:*:*:*:*:*:*:*part: a version: 1.0 update: *
| Vendor | Django Project (dc627eaf-0df6-578e-a932-b094cfede768) |
|---|---|
| Product | Django (20699fa4-fcd8-574c-9a12-8382e87c0a16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/django/django |
purl2cpe | 2026-06-01 10:18:10.923750 |
pkg:pypi/Django |
purl2cpe | 2026-06-01 10:18:10.923752 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2659 |
vulnerable | 2026-06-08 04:51:29.712634 |
Details available
The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.
Published: 2009-08-04T16:13:00.000Z
Updated: 2024-08-07T05:59:56.995Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.