CVE-2015-0846 – Debian Security Advisory 3230-1

https://notcve.org/view.php?id=CVE-2015-0846

20 Apr 2015 — django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors. django-markupfield anterior a 1.3.2 utiliza las configuraciones de docutils RESTRUCTUREDTEXT_FILTER_SETTINGS por defecto, lo que permite a atacantes remotos incluir y leer ficheros arbitrarios a través de vectores no especificados. James P. Turk discovered that the ReST renderer in django-markupfield, a custom Django f... • http://www.debian.org/security/2015/dsa-3230 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •