PT-2022-7209

Name of the Vulnerable Software and Affected Versions Django versions 3.2 through 3.2.14 Django versions 4.0 through 4.0.6 Description An issue was discovered in the HTTP FileResponse class. The application is vulnerable to a reflected file download RFD attack that sets the Content-Disposition...