CVE-2014-0472

Source
https://nvd.nist.gov/vuln/detail/CVE-2014-0472
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-0472.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2014-0472
Aliases
Downstream
Related
Published
2014-04-23T15:55:02Z
Modified
2025-08-09T20:01:25Z
Summary
[none]
Details

The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."

References

Affected packages