Lucene search
MitreCVELIST:CVE-2021-45116HistoryJan 04, 2022 - 11:12 p.m.
CVE-2021-45116
2022-01-0423:12:43
mitre
www.cve.org
9
django
information disclosure
dictsort filter
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language’s variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.
References
docs.djangoproject.com/en/4.0/releases/security/
groups.google.com/forum/#%21forum/django-announce
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
security.netapp.com/advisory/ntap-20220121-0005/
www.djangoproject.com/weblog/2022/jan/04/security-releases/
Related
osv
osv
CVE-2021-45116
2022-01-05 00:15:07
Information disclosure in Django
2022-01-12 19:21:10
BIT-django-2021-45116
2024-03-06 10:53:49
alpinelinux
alpinelinux
CVE-2021-45116
2022-01-05 00:15:07
debiancve
debiancve
CVE-2021-45116
2022-01-05 00:15:07
redhatcve
redhatcve
CVE-2021-45116
2022-01-04 17:05:04
cve
cve
CVE-2021-45116
2022-01-05 00:15:07
prion
prion
Information disclosure
2022-01-05 00:15:00
veracode
veracode
Information Disclosure
2022-01-15 00:37:48
ubuntucve
ubuntucve
CVE-2021-45116
2022-01-04 00:00:00
nvd
nvd
CVE-2021-45116
2022-01-05 00:15:07
github
github
Information disclosure in Django
2022-01-12 19:21:10
altlinux
altlinux
redos
redos
ROS-20220112-04
2022-01-12 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2022-01-05 00:00:00
openvas
openvas
Django < 2.2.26, 3.x < 3.2.11, 4.x < 4.0.1 Multiple Vulnerabilities - Linux
2022-01-11 00:00:00
Debian: Security Advisory (DLA-3177-1)
2022-11-24 00:00:00
debian
debian
[SECURITY] [] python-django security update
2022-11-04 14:36:21
[SECURITY] [] python-django security update
2022-11-04 14:35:57
mageia
mageia
Updated python-django packages fix security vulnerability
2022-01-11 10:12:42
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerabilities (USN-5204-1)
2022-01-05 00:00:00
FreeBSD : Django -- multiple vulnerabilities (d3e023fb-6e88-11ec-b948-080027240888)
2022-01-05 00:00:00
Debian DLA-3177-1 : python-django - LTS security update
2022-11-05 00:00:00
freebsd
freebsd
Django -- multiple vulnerabilities
2021-12-20 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: python-django-3.2.12-1.fc35
2022-02-11 01:23:09
rocky
rocky
Satellite 6.11 Release
2022-07-05 13:55:16
redhat
redhat
(RHSA-2022:5498) Moderate: Satellite 6.11 Release
2022-07-05 13:55:16