CVE-2015-0846

django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - security@debian.org

Published

2015-04-24

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Django-markupfield (Django-markupfield Project)

References

• http://www.debian.org/security/2015/dsa-3230
• https://github.com/jamesturk/django-markupfield/blob/master/CHANGELOG