Django Improper Output Neutralization for Logs vulnerability

🗓️ 05 Jun 2025 03:30:58Reported by GitHub Advisory DatabaseType

Django versions vulnerable to log injection due to improper escaping of request paths in logging.

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: Insufficiently protected credentials and improper output neutralization for logs might affect IBM Storage Defender - Resiliency Service	18 Aug 202518:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-48432	9 Oct 202510:21	–	ibm
AlpineLinux	CVE-2025-48432	5 Jun 202500:00	–	alpinelinux
ArchLinux	[ASA-202506-6] python-django: content spoofing	12 Jun 202500:00	–	archlinux
Chainguard	CVE-2025-48432 vulnerabilities	11 Jun 202519:15	–	cgr
Circl	CVE-2025-48432	4 Jun 202514:28	–	circl
CNNVD	Django 安全漏洞	5 Jun 202500:00	–	cnnvd
CVE	CVE-2025-48432	5 Jun 202500:00	–	cve
Cvelist	CVE-2025-48432	5 Jun 202500:00	–	cvelist
Debian	[SECURITY] [DLA 4210-1] python-django security update	9 Jun 202515:47	–	debian

Vulners

Node

django_project djangoRange5.0a1–5.1.10pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48432
docs	www.docs.djangoproject.com/en/dev/releases/security
groups	www.groups.google.com/g/django-announce
djangoproject	www.djangoproject.com/weblog/2025/jun/04/security-releases
openwall	www.openwall.com/lists/oss-security/2025/06/04/5
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-47.yaml
djangoproject	www.djangoproject.com/weblog/2025/jun/10/bugfix-releases
openwall	www.openwall.com/lists/oss-security/2025/06/10/2
openwall	www.openwall.com/lists/oss-security/2025/06/10/3
openwall	www.openwall.com/lists/oss-security/2025/06/10/4

10 Jun 2025 20:03Current

7.2High risk

Vulners AI Score7.2

CVSS 3.14 - 5.3

EPSS0.00411

SSVC