ChainPyPI:Django
Django: incomplete fixes (2013)
3 CVEs over 2 generations, 3 Apr 2013 to 16 Sep 2013.
Family tree
Left to right by publication date.Oldest first. Select a CVE to open it.- CVE-2013-16643 Apr 2013 First in the chain
- CVE-2013-417916 Sep 2013 incomplete fix for CVE-2013-1664
- CVE-2013-420216 Sep 2013 incomplete fix for CVE-2013-1664
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low Link confidenceHow strong the evidence is that two CVEs are related. High: stated in the CVE text or linked in an advisory, or the same code was patched one release apart. Medium: the same code, or a version step plus a similar description. Low: similar description only.
CVEs in this family
Table view of the tree| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2013-1664 | 3 Apr 2013 | The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and… | First in chain | 18.4 |
| CVE-2013-4179 | 16 Sep 2013 | The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows… · fixed in 2013.2 | CVE-2013-1664 · incomplete fix · High | 17.2 |
| CVE-2013-4202 | 16 Sep 2013 | The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder… | CVE-2013-1664 · incomplete fix · High | 17.1 |