GitHub Advisoryadvisory · PyPI

GHSA-qp56-82vp-xqgv Mezzanine allows attackers to bypass access control mechanisms

MEDIUM Published 2024-02-28 Modified 2024-02-28 Official page ↗

Aliases: CVE-2024-25169
Ecosystem: PyPI
Packages: Mezzanine
Severity: Moderate
Reviewed: 2024-02-28

Affected packages

• PyPI Mezzanine: <= 6.0.0 (no fix yet)

Description

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.

Related

Alias · CVE (1)

CVE-2024-25169 An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request. vulnerability

References

https://nvd.nist.gov/vuln/detail/CVE-2024-25169 advisory
https://github.com/shenhav12/CVE-2024-25169-Mezzanine-v6.0.0 web
https://github.com/stephenmcd/mezzanine package
https://ibb.co/JKh4hmD web
https://ibb.co/Pt9qd8t web
https://ibb.co/hLLPTVp web
https://ibb.co/rfrKj3r web