Django Project Django 1.4.3
Approved changes feed: RSS · Atom
cpe:2.3:a:djangoproject:django:1.4.3:*:*:*:*:*:*:*
part: a version: 1.4.3 update: *
| Vendor | Djangoproject (070db687-4713-5da4-80b0-4a67baf0d0d4) |
|---|---|
| Product | Django (b34a5fd0-fae8-5096-941f-bded7e4dd228) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/django/django |
purl2cpe | 2026-06-01 10:17:26.765380 |
pkg:github/django/django |
purl2cpe | 2026-06-01 10:17:26.765382 |
pkg:pypi/django |
purl2cpe | 2026-06-01 10:17:26.765383 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-0474 |
vulnerable | 2026-06-08 05:05:13.050359 |
Details available
The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to "MySQL typecasting."
Published: 2014-04-23T14:00:00.000Z
Updated: 2024-08-06T09:20:18.434Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0473 |
vulnerable | 2026-06-08 05:05:13.049446 |
Details available
The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users.
Published: 2014-04-23T14:00:00.000Z
Updated: 2024-08-06T09:20:18.401Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0472 |
vulnerable | 2026-06-08 05:05:13.037384 |
Details available
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."
Published: 2014-04-23T14:00:00.000Z
Updated: 2024-08-06T09:20:17.941Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.