Header injection possible in Django

🗓️ 09 Jun 2021 17:14:51Reported by GitHub Advisory DatabaseType

Header injection risk in Django 2.2 to 3.2.

Reporter	Title	Published	Views	Family All 68
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 2.2.24-alt1	13 Jul 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package python3-module-django version 2.2.24-alt1	13 Jul 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana using third-party Kubernetes Operators is affected by Multiple Security Vulnerabilities	17 Apr 202406:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	20 Jun 202420:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	20 Jun 202400:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2024.	15 Apr 202502:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataStage on Cloud Pak for Data is vulnerable to HTTP header injection due to the Django package (CVE-2021-32052)	13 Mar 202523:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by Multiple Security Vulnerabilities	30 May 202411:23	–	ibm
ATTACKERKB	CVE-2021-32052	6 May 202116:15	–	attackerkb
Circl	CVE-2021-32052	18 Jul 202513:11	–	circl

Vulners

Node

django_project djangoRange3.1–3.1.10pip

django_project djangoRange2.2–2.2.22pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32052
github	www.github.com/django/django/commit/e1e81aa1c4427411e3c68facdd761229ffea6f6f
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
groups	www.groups.google.com/forum/
openwall	www.openwall.com/lists/oss-security/2021/05/06/1
docs	www.docs.djangoproject.com/en/3.2/releases/security
github	www.github.com/advisories/GHSA-qm57-vhq3-3fwf
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-8.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE
security	www.security.netapp.com/advisory/ntap-20210611-0002

20 Sep 2024 15:28Current

0.8Low risk

Vulners AI Score0.8

CVSS 24.3

CVSS 3.16.1

EPSS0.03146