| शीर्षक | django-haystack 3.3.0 Code Execution |
|---|
| विवरण | django-haystack (django-haystack) up to 3.3.0 is vulnerable to template injection via eval() in the more_like_this template tag (CWE-95). The result_class parameter is passed directly to the Python built-in eval() function without input sanitization or restriction. An authenticated user with Django template editing privileges can inject arbitrary Python expressions, leading to remote code execution on the server. The vulnerability is documented in public GitHub Security Advisory GHSA-r3hx-x5rh-p9vv, which was published by the maintainer. The maintainer did not request a CVE. CVSS v3.1 Base Score 9.0 High (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). Researcher: mohammad adnan (cystack.ps redteam). |
|---|
| स्रोत | ⚠️ https://github.com/django-haystack/django-haystack/security/advisories/GHSA-r3hx-x5rh-p9vv |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 15/09/2026 12:20 AM (22 दिन पहले) |
|---|
| संयम | 05/10/2026 09:33 AM (20 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 413523 [django-haystack तक 3.3.0 more_like_this Template Tag elasticsearch_backend.py _to_python result_class अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|