cve.bz

CVE-2015-8213

no score yetEPSS 4.3%

djangoproject django: no CVSS score yet. EPSS 4.3% chance of exploitation in the next 30 days. Fixed in django 1.7.11, 1.8.7, 1.9rc2.

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.
EPSS
4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE
CWE-200
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-6wcr-wcqm-3mfhPyPIdjango>=1.7 <1.7.111.7.11
GHSA-6wcr-wcqm-3mfhPyPIdjango>=1.8a1 <1.8.71.8.7
GHSA-6wcr-wcqm-3mfhPyPIdjango>=1.9a1 <1.9rc21.9rc2
PYSEC-2015-11PyPIdjango<1.7.11
>=1.8 <1.8.7
>=1.9a0 <1.9rc2		1.7.11, 1.8.7, 1.9rc2

References

Check your stackJSON