Lucene search

K

GoogleOSV:CVE-2021-44420

HistoryDec 08, 2021 - 12:15 a.m.

CVE-2021-44420

2021-12-0800:15:07

Google

osv.dev

8

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.5%

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CPENameOperatorVersion
djangoeq2.2.11
djangoeq2.2.8
djangoeq2.2.19
djangoeq2.2.18
djangoeq2.2.24
djangoeq2.2.21
djangoeq2.2.15
djangoeq2.2.10
djangoeq2.2.14
djangoeq2.2.9

Rows per page:

1-10 of 251

References

docs.djangoproject.com/en/3.2/releases/security/

groups.google.com/forum/#%21forum/django-announce

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/

security.netapp.com/advisory/ntap-20211229-0006/

www.djangoproject.com/weblog/2021/dec/07/security-releases/

www.openwall.com/lists/oss-security/2021/12/07/1

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.5%

Related for OSV:CVE-2021-44420

altlinux2 alpinelinux1 cve1 veracode1 nvd1 osv5 github1 openvas5 cvelist1 nessus6 ubuntucve1 ubuntu1 mageia1 redhatcve1 debiancve1 prion1 redhat2 fedora1 oraclelinux1 rocky1