Django CVE-2014-0474 Multiple Data Type Injection Vulnerabilities
BID:67038
Info
Django CVE-2014-0474 Multiple Data Type Injection Vulnerabilities
| Bugtraq ID: | 67038 |
| Class: | Design Error |
| CVE: |
CVE-2014-0474 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 23 2014 12:00AM |
| Updated: | Apr 13 2015 09:24PM |
| Credit: | Michael Koziarski, Ruby on Rails team |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 12.10 Ubuntu Ubuntu Linux 12.04 LTS Ubuntu Ubuntu Linux 10.04 LTS Redhat OpenStack 4.0 Redhat OpenStack 3.0 Oracle Solaris 11.2 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 IBM SmartCloud Provisioning 2.3.01 IFix2 IBM SmartCloud Provisioning 2.3.0.1 IFix1 IBM SmartCloud Provisioning 2.3.0.1 IBM SmartCloud Provisioning 2.3 Gentoo Linux Djangoproject Django 1.6.2 Djangoproject Django 1.5.5 Djangoproject Django 1.4.10 Djangoproject Django 1.7 beta Djangoproject Django 1.6 Djangoproject Django 1.5.4 Djangoproject Django 1.5.3 Djangoproject Django 1.5.2 Djangoproject Django 1.5.1 Djangoproject Django 1.4.8 Djangoproject Django 1.4.7 Djangoproject Django 1.4.6 Djangoproject Django 1.4.5 Djangoproject Django 1.4.4 Djangoproject Django 1.4.2 Djangoproject Django 1.4.1 Djangoproject Django 1.4 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Djangoproject Django 1.6.3 Djangoproject Django 1.5.6 Djangoproject Django 1.4.11 Djangoproject Django 1.7 beta 2 |
Discussion
Django CVE-2014-0474 Multiple Data Type Injection Vulnerabilities
Django is prone to a multiple data-type injection vulnerabilities.
Attackers can exploit these issues to bypass certain queries and perform unauthorized actions.
Versions prior to Django 1.6.3, 1.5.6 and 1.4.11 are vulnerable.
Django is prone to a multiple data-type injection vulnerabilities.
Attackers can exploit these issues to bypass certain queries and perform unauthorized actions.
Versions prior to Django 1.6.3, 1.5.6 and 1.4.11 are vulnerable.
Solution / Fix
Django CVE-2014-0474 Multiple Data Type Injection Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Django CVE-2014-0474 Multiple Data Type Injection Vulnerabilities
References:
References:
- Django Homepage (Django)