Server-Side Request Forgery (SSRF)

🗓️ 03 Jun 2021 04:29:52Reported by Veracode Vulnerability DatabaseType

django SSRF vulnerability inadequate IPv4 validatio

Reporter	Title	Published	Views	Family All 145
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 2.2.24-alt1	13 Jul 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package python3-module-django version 2.2.24-alt1	13 Jul 202100:00	–	altlinux
AlpineLinux	CVE-2021-33571	8 Jun 202100:00	–	alpinelinux
ArchLinux	[ASA-202106-41] python-django: multiple issues	15 Jun 202100:00	–	archlinux
AstraLinux	Astra Linux – Vulnerability in Python-Django	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the URLValidator, validate_ipv4_address, and validate_ipv46_address functions of the Django web application software lies in insufficient validation of incoming requests, allowing attackers to compromise data integrity.	27 Oct 202100:00	–	bdu_fstec
CNNVD	Django 代码问题漏洞	2 Jun 202100:00	–	cnnvd
CVE	CVE-2021-33571	8 Jun 202100:00	–	cve
Cvelist	CVE-2021-33571	8 Jun 202100:00	–	cvelist
Debian	[SECURITY] [DLA 2676-1] python-django security update	5 Jun 202109:58	–	debian

Vulners

Node

python-django python-djangoMatch1:1.10.7-2+deb9u9debian

AND

py3-django py3-djangoMatch1.11.28-r0python

AND

py3-django py3-djangoMatch1.11.29-r0python

AND

AND

AND

AND

AND

AND

AND

python-django python-djangoMatch1:1.11.29-1~deb10u1debian

AND

django_project djangoRange3.0a1–3.1.11python

django_project djangoRange3.2a1–3.2.3python

django_project djangoRange2.0a1–2.2.23python

Source	Link
django	www.django.readthedocs.io/en/latest/releases/security.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
docs	www.docs.djangoproject.com/en/3.2/releases/security/
github	www.github.com/django/django/commit/203d4ab9ebcd72fc4d6eb7398e66ed9e474e118e
github	www.github.com/django/django/commit/9f75e2e562fa0c0482f3dde6fc7399a9070b4a3d
github	www.github.com/django/django/commit/f27c38ab5d90f68c9dd60cabef248a570c0be8fc
groups	www.groups.google.com/g/django-announce/c/sPyjSKMi8Eo
security	www.security.netapp.com/advisory/ntap-20210727-0004/
djangoproject	www.djangoproject.com/weblog/2021/jun/02/security-releases/

07 Dec 2023 23:36Current

3Low risk

Vulners AI Score3

CVSS 25

CVSS 3.17.5

EPSS0.00015