High severityNVD Advisory· Published Apr 24, 2015· Updated Jun 17, 2026
CVE-2015-0846
CVE-2015-0846
Description
django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
django-markupfieldPyPI | < 1.3.2 | 1.3.2 |
Affected products
2- cpe:2.3:a:django-markupfield_project:django-markupfield:*:*:*:*:*:*:*:*Range: <=1.3.1
Patches
Vulnerability mechanics
References
8- www.debian.org/security/2015/dsa-3230nvdVendor AdvisoryWEB
- github.com/advisories/GHSA-wxmr-7xjv-8xqwghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2015-0846ghsaADVISORY
- github.com/jamesturk/django-markupfield/blob/1.3.3/CHANGELOGghsaWEB
- github.com/jamesturk/django-markupfield/blob/master/CHANGELOGnvdWEB
- github.com/jamesturk/django-markupfield/commit/b45734ea1d206abc1ed2a90bdc779708066d49f3ghsaWEB
- github.com/pypa/advisory-database/tree/main/vulns/django-markupfield/PYSEC-2015-12.yamlghsaWEB
- www.djangoproject.com/weblog/2015/apr/21/docutils-security-advisoryghsaWEB
News mentions
0No linked articles in our index yet.