PT-2013-4954 · Django · Django

Rainer Koirikivi · Publicado 2013-09-16 · Atualizado 2022-05-17 · CVE-2013-4315

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Django versions 1.4.x through 1.4.6 Django versions 1.5.x through 1.5.2 Django versions 1.6.x through 1.6 beta 2

Description The issue allows remote attackers to read arbitrary files via a file path in the ALLOWED INCLUDE ROOTS setting followed by a .. (dot dot) in a ssi template tag. This is a directory traversal vulnerability.

Recommendations For Django versions 1.4.x through 1.4.6, update to version 1.4.7 or later. For Django versions 1.5.x through 1.5.2, update to version 1.5.3 or later. For Django versions 1.6.x through 1.6 beta 2, update to version 1.6 beta 3 or later. As a temporary workaround, consider restricting access to the ALLOWED INCLUDE ROOTS setting and ssi template tags to minimize the risk of exploitation.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2013-4315

DSA-2755-1

GHSA-VJJP-9R83-22RC

MGASA-2013-0283

MGASA-2013-0284

PYSEC-2013-20

RHSA-2013:1521

Produtos afetados

Django

Referências · 23

• https://github.com/django/django · Nota
• https://github.com/django/django/commit/988b61c550d798f9a66d17ee0511fb7a9a7f33ca · Nota
• https://github.com/django/django/commit/87d2750b39f6f2d54b7047225521a44dcd37e896 · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2013-20.yaml · Nota
• https://advisories.mageia.org/MGASA-2013-0283.html · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4315 · Aviso do Fabricante
• http://secunia.com/advisories/54772 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2013-1521.html · Aviso do Fabricante
• http://secunia.com/advisories/54828 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2013-10/msg00015.html · Aviso do Fabricante
• https://djangoproject.com/weblog/2013/sep/15/security · Nota
• https://osv.dev/vulnerability/CVE-2013-4315 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=11217.mga3 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-4315 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2013-0284 · Aviso do Fabricante