CVE-2010-4534

CVE-2010-4534 describes an information disclosure vulnerability in the administrative interface of Django versions prior to 1.1.3, 1.2.4, and 1.3 beta 1. Authenticated attackers can exploit this flaw by manipulating query strings with regular expressions to filter objects, potentially revealing sensitive data like password hashes. With a CVSS score of 4.0, this vulnerability is network-exploitable with low attack complexity, requiring authentication, and primarily impacts confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.