Executive brief
Mezzanine allows attackers to bypass access control mechanisms
Affected products
- PyPI Mezzanine
Junglewise Threat Intelligence
CVE-2024-25169: PYSEC-2026-1627 - Mezzanine allows attackers to bypass access control mechanisms
CVE-2024-25169 · Severity: info · Published 2026-07-07
Technologies: Mezzanine (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1626 - Mezzanine allows attackers to bypass access controls via manipulating the Host header
- Mezzanine CMS stored XSS in blog post component
- Mezzanine CMS stored XSS in displayable_links_js function
- Mezzanine CMS persistent XSS in Forms module via malicious filename
- PYSEC-2021-343 - Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the componen