ID | CVE-2014-0474 | ||||||
Sažetak | The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to "MySQL typecasting." | ||||||
Reference |
|
||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:N/AC:L/Au:N/C:C/I:C/A:C | ||||||
Zadnje važnije ažuriranje | 07-01-2017 - 02:59 | ||||||
Objavljeno | 23-04-2014 - 15:55 |