Astra Linux – vulnerability in python-django, python2.7

Packages python/cpython versions 0 through 3.6.13, 3.7.0 through 3.7.10, 3.8.0 through 3.8.8, and 3.9.0 through 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parseqsl and urllib.parse.parseqs. This vulnerability exploits a technique known as “parameter cloaking.” When an attacker i...