Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Django 信息泄露漏洞
Vulnerability Description
Django是Django软件基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 Django的管理接口中存在漏洞，该漏洞源于程序未对历史视图检查权限。远程经过授权的管理者可利用该漏洞获得敏感对象历史信息。以下版本中存在漏洞：1.3.6之前的1.3.x版本，1.4.4之前的1.4.x版本， release candidate 2之前的1.5版本。
CVSS Information
N/A
Vulnerability Type
N/A