The Vulnerability History Project
Vulnerabilities
Insights
Curate
Tags
All
Projects
CWEs
Languages
Lessons
Severities
Subsystems
More
News
Projects We Study
How to Contribute
By the Numbers
About Us
Toggle Theme
Warning: Our website does not support Internet Explorer, please use Edge instead.
[1.3.x] Checked object permissions on admin history view.
This is a security fix. Disclosure and advisory coming shortly. Patch by Russell Keith-Magee.
by
Lawrence the Dove 2013-02-04 23:57:59 UTC
commit d3a45e10c8ac8268899999129daa27652ec0da35
Django
Fix
Histclosure CVE-2013-0305
django/contrib/admin/options.py
+2
-8
tests/regressiontests/admin_views/tests.py
-40
expand_less