CVE-2024-33571 WordPress VOD Infomaniak plugin <= 1.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infomaniak Staff VOD Infomaniak allows Reflected XSS.This issue affects VOD Infomaniak: from n/a through 1.5.6...

CVE-2024-33571

A Cross-Site Scripting (XSS) vulnerability exists in the VOD Infomaniak WordPress plugin (slug: vod-infomaniak) in versions up to and including 1.5.6 . The flaw is caused by the improper neutralization of input during web page generation, specifically affecting the vod-infomaniak component. This ...

CVE-2024-33571 WordPress VOD Infomaniak plugin <= 1.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak.This issue affects VOD Infomaniak: from n/a through = 1.5.6...

WordPress VOD Infomaniak Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)

Software VOD Infomaniak Type Plugin Vulnerable versions = 1.5.6 Fixed in 1.5.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33571 Patch priority Medium CVSS severity Medium 7.1 Developer Infomaniak Network PSID 28a7c79f4be8 Credits Rafie Muhammad Patchstack...

[SECURITY] [DLA 3744-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3744-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 29, 2024 https://wiki.debian.org/LTS -...

RHEL 8 : Red Hat OpenStack Platform 16.2 (python-django20) (RHSA-2021:3490)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3490 advisory. Security Fixes: Potential directory-traversal via archive.extract CVE-2021-3281 Potential directory traversal via admindocs CVE-2021-33203...

Mageia: Security Advisory (MGASA-2021-0356)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : Red Hat OpenStack Platform 16.1 (python-django20) (RHSA-2021:5070)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5070 advisory. Security Fixes: Potential directory-traversal via archive.extract CVE-2021-3281 potential directory-traversal via uploaded files...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update

An update for python-django20 is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Updated python-django package fixes security vulnerabilities

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability CVE-2021-28658. In Django 2.2 before 2.2.21, 3.1 before 3.1.9, an...

Security fix for the ALT Linux 10 package python3-module-django version 2.2.24-alt1

July 13, 2021 Alexey Shabalin 2.2.24-alt1 - new version 2.2.24 - Fixes for the following security vulnerabilities: + CVE-2021-28658 Potential directory-traversal via uploaded files + CVE-2021-31542 Potential directory-traversal via uploaded files + CVE-2021-32052 Header injection possibility sinc...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.24-alt1

July 13, 2021 Alexey Shabalin 2.2.24-alt1 - new version 2.2.24 - Fixes for the following security vulnerabilities: + CVE-2021-28658 Potential directory-traversal via uploaded files + CVE-2021-31542 Potential directory-traversal via uploaded files + CVE-2021-32052 Header injection possibility sinc...

[ASA-202106-41] python-django: multiple issues

Arch Linux Security Advisory ASA-202106-41 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-33203 CVE-2021-33571 Package : python-django Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2026 Summary ======= The package...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), apis-ampel (0.1.0) +55 more potentially affected by CVE-2021-33571 via django (>=3.2.0rc1, <=3.2.3)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.2.0, =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev0, =0.1.0, =21.1.2, =21.1.4 - common-framework 2021.4.1 - directory-validators 9.0.0 - django-admin-taggit-ui 0.1.0.dev0 - django-blocklist 1.0.0 - django-brazilian-zipcode 0.1.0 - django-cachalot 2.4.0 and more...

Django < 2.2.24, 3.0 < 3.1.12, 3.2 < 3.2.4 Multiple Vulnerabilities - Linux

Django is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Django < 2.2.24, 3.0 < 3.1.12, 3.2 < 3.2.4 Multiple Vulnerabilities - Windows

Django is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-33571

In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validateipv4address, and validateipv46address do not prohibit leading zero characters in octal literals. This may allow a bypass of access control that is based on IP addresses. validateipv4address and...

alcali (>=2018.3.4, <=3003.1.0), archivebox (>=0.4.6, <=0.5.4) +224 more potentially affected by CVE-2021-33571 via django (>=3.0.0, <=3.1.11)

django PYPI version =3.0.0, =2018.3.4, =0.4.6, =1.0.0, =0.1.0, =0.1.0, =1.0.0b3, =0.1.3, =2.2.0, =0.18.0, =2.8.0, =0.0.1, =0.0.32, =0.0.33 and more Source cves: CVE-2021-33571 Source advisory: OSV:PYSEC-2021-99...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), apis-ampel (0.1.0) +54 more potentially affected by CVE-2021-33571 via django (>=3.2.0, <=3.2.3)

django PYPI version =3.2.0, =1.0.1a0, =0.2.0, =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev0, =0.1.0, =21.1.2, =21.1.4 - common-framework 2021.4.1 - directory-validators 9.0.0 - django-admin-taggit-ui 0.1.0.dev0 - django-blocklist 1.0.0 - django-brazilian-zipcode 0.1.0 - django-cachalot 2.4.0 and more...

aimmo (>=0.61.9b59, <=0.69.10b450), alcali (>=2018.3.1, <=2019.2.3) +93 more potentially affected by CVE-2021-33571 via django (>=2.2.0, <=2.2.22)

django PYPI version =2.2.0, =0.61.9b59, =2018.3.1, =0.3.62, =0.14.0, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =1.0.0, =0.0.30, =0.0.1, =0.0.5 and more Source cves: CVE-2021-33571 Source advisory: OSV:PYSEC-2021-99...