Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Django 'compile-messages.py'远程任意指令执行漏洞
Vulnerability Description
Django 0.95版本中的bin/compile-messages.py没有在通过os.system函数调用msgfmt程序前引用参数字符串，这使得攻击者可以借助(1).po或(2).mo文件中的shell元字符，执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A