Lucene search
Veracode Vulnerability DatabaseVERACODE:33699HistoryJan 15, 2022 - 12:37 a.m.
Information Disclosure
2022-01-1500:37:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
python-django
vulnerability
information disclosure
template language
variable resolution logic
software
EPSS
0.002
Percentile
56.1%
python-django is vulnerable to information disclosure. The vulnerability exist due to the lack of sanitizaton of the Template Language’s variable resolution logic.
References
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2021-45116
docs.djangoproject.com/en/4.0/releases/security/
groups.google.com/forum/#!forum/django-announce
lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
security.netapp.com/advisory/ntap-20220121-0005/
www.djangoproject.com/weblog/2022/jan/04/security-releases/
Related
osv
osv
CVE-2021-45116
2022-01-05 00:15:07
Information disclosure in Django
2022-01-12 19:21:10
BIT-django-2021-45116
2024-03-06 10:53:49
debiancve
debiancve
CVE-2021-45116
2022-01-05 00:15:07
redhatcve
redhatcve
CVE-2021-45116
2022-01-04 17:05:04
alpinelinux
alpinelinux
CVE-2021-45116
2022-01-05 00:15:07
cvelist
cvelist
CVE-2021-45116
2022-01-04 23:12:43
cve
cve
CVE-2021-45116
2022-01-05 00:15:07
ubuntucve
ubuntucve
CVE-2021-45116
2022-01-04 00:00:00
nvd
nvd
CVE-2021-45116
2022-01-05 00:15:07
github
github
Information disclosure in Django
2022-01-12 19:21:10
prion
prion
Information disclosure
2022-01-05 00:15:00
ubuntu
ubuntu
Django vulnerabilities
2022-01-05 00:00:00
redos
redos
ROS-20220112-04
2022-01-12 00:00:00
altlinux
altlinux
openvas
openvas
Django < 2.2.26, 3.x < 3.2.11, 4.x < 4.0.1 Multiple Vulnerabilities - Linux
2022-01-11 00:00:00
Debian: Security Advisory (DLA-3177-1)
2022-11-24 00:00:00
debian
debian
[SECURITY] [] python-django security update
2022-11-04 14:36:21
[SECURITY] [] python-django security update
2022-11-04 14:35:57
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerabilities (USN-5204-1)
2022-01-05 00:00:00
FreeBSD : Django -- multiple vulnerabilities (d3e023fb-6e88-11ec-b948-080027240888)
2022-01-05 00:00:00
Debian DLA-3177-1 : python-django - LTS security update
2022-11-05 00:00:00
mageia
mageia
Updated python-django packages fix security vulnerability
2022-01-11 10:12:42
freebsd
freebsd
Django -- multiple vulnerabilities
2021-12-20 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: python-django-3.2.12-1.fc35
2022-02-11 01:23:09
rocky
rocky
Satellite 6.11 Release
2022-07-05 13:55:16
redhat
redhat
(RHSA-2022:5498) Moderate: Satellite 6.11 Release
2022-07-05 13:55:16