~ / search / GHSA-qp56-82vp-xqgv

GHSA-qp56-82vp-xqgv

Mezzanine allows attackers to bypass access control mechanisms

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-25169

Packages

EcosystemPackageAffectedFixed in
PyPI Mezzanine <= 6.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.

References

External links from the advisory. They lead to third-party sites.