UBUNTU-CVE-2024-47252

Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to log variables...

CVE-2025-5463

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information...

SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2025:01952-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01952-1 advisory. - CVE-2025-48432: log injection or forgery due to unescaped control characters being added into logs bsc1244095. Tenable has extracted th...

MGASA-2025-0193 Updated python-django packages fix security vulnerability

Potential log injection via unescaped request path. CVE-2025-48432...

Updated python-django packages fix security vulnerability

Potential log injection via unescaped request path. CVE-2025-48432...

Fedora 41 : python-django5 (2025-2dff80a8a3)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2dff80a8a3 advisory. - Fixes CVE-2025-32873: Denial-of-service possibility in striptags - Fixes CVE-2025-48432: Potential log injection via unescaped request path Tenabl...

Fedora 42 : python-django4.2 (2025-6de2ab1d25)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6de2ab1d25 advisory. - Fixes CVE-2025-32873: Denial-of-service possibility in striptags - Fixes CVE-2025-48432: Potential log injection via unescaped request path Tenabl...

USN-7555-3 python-django vulnerability

USN-7555-1 fixed a vulnerability in Django. This update provides an additional fix for Ubuntu 20.04 LTS. Original advisory details: It was discovered that Django incorrectly handled certain unescaped request paths. An attacker could possibly use this issue to perform a log injection...

USN-7555-3: Django vulnerability

USN-7555-1 fixed a vulnerability in Django. This update provides an additional fix for Ubuntu 20.04 LTS. Original advisory details: It was discovered that Django incorrectly handled certain unescaped request paths. An attacker could possibly use this issue to perform a log injection...

Fedora 41 : python-django4.2 (2025-d4849e6cf3)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d4849e6cf3 advisory. - Fixes CVE-2025-32873: Denial-of-service possibility in striptags - Fixes CVE-2025-48432: Potential log injection via unescaped request path Tenabl...

Ubuntu: Security Advisory (USN-7555-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7555-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-d4849e6cf3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7555-2: Django vulnerability

USN-7555-1 fixed vulnerabilities in Django. The fix was incomplete. This update applies an additional patch to fix it properly. Original advisory details: It was discovered that Django incorrectly handled certain unescaped request paths. An attacker could possibly use this issue to perform a log...

USN-7555-2 python-django vulnerability

USN-7555-1 fixed vulnerabilities in Django. The fix was incomplete. This update applies an additional patch to fix it properly. Original advisory details: It was discovered that Django incorrectly handled certain unescaped request paths. An attacker could possibly use this issue to perform a log...

TencentOS Server 4: pcs (TSSA-2025:0176)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0176 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

openSUSE Security Advisory (SUSE-SU-2025:01952-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for python-Django

This update for python-Django fixes the following issues: CVE-2025-48432: log injection or forgery due to unescaped control characters being added into logs bsc1244095. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2025:01952-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2025-48432: log injection or forgery due to unescaped control characters being added into logs bsc1244095...

[SECURITY] [DLA 4210-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4210-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb June 09, 2025 https://wiki.debian.org/LTS -...