2 matches found
MGASA-2021-0135 Updated python-django package fixes a security vulnerability
Django contains a copy of urllib.parse.parseqsl which was added to backport some security fixes to prevent web cache poisoning. A further security fix has been issued recently such that parseqsl no longer allows using ; as a query parameter separator by default CVE-2021-23336...
5.9CVSS7.3AI score0.40736EPSS
SaveExploits1References4
Updated python-django package fixes a security vulnerability
Django contains a copy of urllib.parse.parseqsl which was added to backport some security fixes to prevent web cache poisoning. A further security fix has been issued recently such that parseqsl no longer allows using ; as a query parameter separator by default CVE-2021-23336...
5.9CVSS7.2AI score0.40736EPSS
SaveExploits1References3
20