Логотип exploitDog
bind:"GHSA-v6rh-hp5x-86rv" OR bind:"CVE-2021-44420"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-v6rh-hp5x-86rv" OR bind:"CVE-2021-44420"

Количество 7

Количество 7

github логотип

GHSA-v6rh-hp5x-86rv

около 4 лет назад

Potential bypass of an upstream access control based on URL paths in Django

CVSS3: 7.3
EPSS: Низкий
ubuntu логотип

CVE-2021-44420

около 4 лет назад

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 7.3
EPSS: Низкий
redhat логотип

CVE-2021-44420

около 4 лет назад

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2021-44420

около 4 лет назад

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 7.3
EPSS: Низкий
debian логотип

CVE-2021-44420

около 4 лет назад

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, ...

CVSS3: 7.3
EPSS: Низкий
oracle-oval логотип

ELSA-2022-9341

больше 3 лет назад

ELSA-2022-9341: ol-automation-manager security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2023:0005-1

почти 3 года назад

Security update for python-Django

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-v6rh-hp5x-86rv

Potential bypass of an upstream access control based on URL paths in Django

CVSS3: 7.3
0%
Низкий
около 4 лет назад
ubuntu логотип
CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 7.3
0%
Низкий
около 4 лет назад
redhat логотип
CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 5.3
0%
Низкий
около 4 лет назад
nvd логотип
CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 7.3
0%
Низкий
около 4 лет назад
debian логотип
CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, ...

CVSS3: 7.3
0%
Низкий
около 4 лет назад
oracle-oval логотип
ELSA-2022-9341

ELSA-2022-9341: ol-automation-manager security update (IMPORTANT)

больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2023:0005-1

Security update for python-Django

почти 3 года назад

Уязвимостей на страницу