The vulnerability of the Django web application software lies in the fact that code is loaded without any checks for its integrity. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

Django loads code without integrity checks, enabling access to sensitive data, integrity compromise, and service failures.

Reporter	Title	Published	Views	Family All 119
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.15-alt1	30 Aug 202200:00	–	altlinux
FreeBSD	Django -- multiple vulnerabilities	1 Aug 202200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in sinatra-2.0.5.gem	30 Jun 202611:08	–	ibm
AlpineLinux	CVE-2022-36359	3 Aug 202200:00	–	alpinelinux
Circl	CVE-2022-36359	3 Aug 202218:18	–	circl
CNNVD	Django 安全漏洞	3 Aug 202200:00	–	cnnvd
CVE	CVE-2022-36359	3 Aug 202200:00	–	cve
Cvelist	CVE-2022-36359	3 Aug 202200:00	–	cvelist
Debian	[SECURITY] [DSA 5254-1] python-django security update	15 Oct 202216:00	–	debian
Debian CVE	CVE-2022-36359	3 Aug 202200:00	–	debiancve

Vulners

Node

django djangoRange3.2–3.2.15

django djangoRange4.0–4.0.7

Source	Link
openwall	www.openwall.com/lists/oss-security/2022/08/03/1
docs	www.docs.djangoproject.com/en/4.0/releases/security/
docs	www.docs.djangoproject.com/en/4.0/releases/security/
github	www.github.com/django/django/commit/b3e4494d759202a3b6bf247fd34455bf13be5b80
github	www.github.com/django/django/commit/b7d9529cbe0af4adabb6ea5d01ed8dcce3668fb3
github	www.github.com/django/django/commit/bd062445cffd3f6cc6dcd20d13e2abed818fa173
groups	www.groups.google.com/g/django-announce/c/8cz--gvaJr4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-36359
security	www.security.netapp.com/advisory/ntap-20220915-0008/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-36359

11 Jan 2024 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 38.8

CVSS 210

EPSS0.00654