Most recent entries from all

EUVD-2026-123550

fkie_cve-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.

GHSA-9xg7-gg9m-rmq9 — Django Admin Media Handler Vulnerable to Directory Traversal

Affected: PyPI: Django

The Admin media handler in `core/servers/basehttp.py` in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.

gsd-2009-2659

PYSEC-2009-3

Affected: PyPI: django