The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to "MySQL typecasting."
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: debian

Published: 2014-04-23T14:00:00

Updated: 2024-08-06T09:20:18.434Z

Reserved: 2013-12-19T00:00:00

Link: CVE-2014-0474

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2014-04-23T15:55:03.237

Modified: 2024-11-21T02:02:12.650

Link: CVE-2014-0474

cve-icon Redhat

Severity : Moderate

Publid Date: 2014-04-21T00:00:00Z

Links: CVE-2014-0474 - Bugzilla