Last night, I read a PDF detailing a privilege escalation attack a researcher had performed on a Django admin site. I'm curious- was the unfortunate application susceptible to this attack due to a misconfiguration, or rather due to an inherent vulnerability in Django itself?

Here's the PDF. https://seanmelia.files.wordpress.com/2017/06/django-privilege-escalation-e28093-zero-to-superuser.pdf

I'd also like to note that I'm new to Django and would appreciate knowing any other inherent vulnerabilities you know of.

1 Answer 1


This was a programming error on the web dev's end. Not a Django vulnerability.

Django vulnerability lists can be found on the Offical CVE site:


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.