GCVE - cpe:2.3:a:djangoproject:django:1.3.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:djangoproject:django:1.3.3:*:*:*:*:*:*:*

part: a version: 1.3.3 update: *

Vendor	Djangoproject (`070db687-4713-5da4-80b0-4a67baf0d0d4`)
Product	Django (`b34a5fd0-fae8-5096-941f-bded7e4dd228`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:docker/django/django`	purl2cpe	2026-06-01 10:17:26.754559
`pkg:github/django/django`	purl2cpe	2026-06-01 10:17:26.754560
`pkg:pypi/django`	purl2cpe	2026-06-01 10:17:26.754562

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-0306`	vulnerable	2026-06-08 05:03:46.935993	Details available The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter. Published: 2013-05-02T14:00:00.000Z Updated: 2024-08-06T14:25:08.778Z Open on db.gcve.eu Reference links https://www.djangoproject.com/weblog/2013/feb/19/security/ http://ubuntu.com/usn/usn-1757-1 http://www.debian.org/security/2013/dsa-2634 http://rhn.redhat.com/errata/RHSA-2013-0670.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0305`	vulnerable	2026-06-08 05:03:46.930883	Details available The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information. Published: 2013-05-02T14:00:00.000Z Updated: 2024-08-06T14:18:09.639Z Open on db.gcve.eu Reference links https://www.djangoproject.com/weblog/2013/feb/19/security/ http://ubuntu.com/usn/usn-1757-1 http://www.debian.org/security/2013/dsa-2634 http://rhn.redhat.com/errata/RHSA-2013-0670.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4520`	vulnerable	2026-06-08 05:02:51.139916	Details available The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values. Published: 2012-11-18T23:00:00.000Z Updated: 2024-08-06T20:42:53.672Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/10/30/4 http://securitytracker.com/id?1027708 https://github.com/django/django/commit/b45c377f8f488955e0c7069cad3f3dd21910b071 http://www.osvdb.org/86493 http://secunia.com/advisories/51314	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.