CVE-2015-8213

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to…

published December 7, 2015

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04284 · 91.0th percentile
Published
2015-12-07T20:00Z
EPSS history
Timeline
  • 07 DEC 20:00Z
    The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to…
    cvelistv5