Information Disclosure

🗓️ 04 Aug 2022 06:24:41Reported by Veracode Vulnerability DatabaseType

Django vulnerability in response.py for Content-Disposition header

Reporter	Title	Published	Views	Family All 116
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.15-alt1	30 Aug 202200:00	–	altlinux
FreeBSD	Django -- multiple vulnerabilities	1 Aug 202200:00	–	freebsd
AlpineLinux	CVE-2022-36359	3 Aug 202200:00	–	alpinelinux
BDU FSTEC	The vulnerability of the Django web application software lies in the fact that code is loaded without any checks for its integrity. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.	26 Dec 202300:00	–	bdu_fstec
Circl	CVE-2022-36359	3 Aug 202218:18	–	circl
CNNVD	Django 安全漏洞	3 Aug 202200:00	–	cnnvd
CVE	CVE-2022-36359	3 Aug 202200:00	–	cve
Cvelist	CVE-2022-36359	3 Aug 202200:00	–	cvelist
Debian	[SECURITY] [DSA 5254-1] python-django security update	15 Oct 202216:00	–	debian
Debian CVE	CVE-2022-36359	3 Aug 202200:00	–	debiancve

Vulners

Node

AND

py3-django py3-djangoMatch3.1.13-r0python

AND

py3-django py3-djangoMatch3.2.14-r0python

AND

py3-django py3-djangoMatch3.2.12-r0python

AND

py3-django py3-djangoMatch1.11.28-r0python

AND

AND

py3-django py3-djangoMatch3.2.13-r0python

AND

AND

py3-django py3-djangoMatch1.11.29-r0python

AND

py3-django py3-djangoMatch3.1.13-r1python

AND

py3-django py3-djangoMatch3.2.13-r0python

AND

py3-django py3-djangoMatch3.2.14-r0python

AND

django_project djangoRange2.1–3.2.14python

django_project djangoRange4.0a1–4.0.6python

django_project djangoRange4.1a1–4.1rc1python

django_project djangoRange2.1a1–2.1rc1python

Source	Link
seclists	www.seclists.org/oss-sec/2022/q3/78
bugzilla	www.bugzilla.suse.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2022/08/03/1
github	www.github.com/django/django/commit/b3e4494d759202a3b6bf247fd34455bf13be5b80
github	www.github.com/django/django/commit/b7d9529cbe0af4adabb6ea5d01ed8dcce3668fb3
github	www.github.com/django/django/commit/46916665f9aa729067ef894e994854ecf9223157
djangoproject	www.djangoproject.com/weblog/2022/aug/03/security-releases/
debian	www.debian.org/security/2022/dsa-5254
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/

07 Nov 2023 22:11Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.8

EPSS0.0113