CVE-2018-16984

score

<0.1

cvss

4.9

epss

2.1%

published

2018-10-02

kev added

—

first seen

2026-10-21

Django < 2.1.2 contains a password hash disclosure caused by bypassing the read-only password widget in the admin interface for users with only view permission, letting unprivileged users see password hashes, exploit requires user with view permission.