mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2024-12-22 17:16:24 +00:00
Code Issues 25 Releases Wiki Activity

Changed severity levels to list in security policy docs.

Browse Source
This commit is contained in:
shivaramkumar 2024-02-05 05:36:32 +01:00 committed by GitHub
parent e67d7d70fa
commit a47de0d6cd
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 13 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
docs/internals/security.txt
View File

@ -84,24 +84,24 @@ upcoming security release, as well as the severity of the issues. This is to
aid organizations that need to ensure they have staff available to handle aid organizations that need to ensure they have staff available to handle
triaging our announcement and upgrade Django as needed. Severity levels are: triaging our announcement and upgrade Django as needed. Severity levels are:
**High**: * **High**
* Remote code execution * Remote code execution
* SQL injection * SQL injection
**Moderate**: * **Moderate**
* Cross site scripting (XSS) * Cross site scripting (XSS)
* Cross site request forgery (CSRF) * Cross site request forgery (CSRF)
* Denial-of-service attacks * Denial-of-service attacks
* Broken authentication * Broken authentication
**Low**: * **Low**
* Sensitive data exposure * Sensitive data exposure
* Broken session management * Broken session management
* Unvalidated redirects/forwards * Unvalidated redirects/forwards
* Issues requiring an uncommon configuration option * Issues requiring an uncommon configuration option
Second, we notify a list of :ref:`people and organizations Second, we notify a list of :ref:`people and organizations
<security-notifications>`, primarily composed of operating-system vendors and <security-notifications>`, primarily composed of operating-system vendors and