Логотип exploitDog
bind:"GHSA-v6rh-hp5x-86rv" OR bind:"CVE-2021-44420"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-v6rh-hp5x-86rv" OR bind:"CVE-2021-44420"

Количество 7

Количество 7

github логотип

GHSA-v6rh-hp5x-86rv

почти 4 года назад

Potential bypass of an upstream access control based on URL paths in Django

CVSS3: 7.3
EPSS: Низкий
ubuntu логотип

CVE-2021-44420

почти 4 года назад

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 7.3
EPSS: Низкий
redhat логотип

CVE-2021-44420

почти 4 года назад

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2021-44420

почти 4 года назад

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 7.3
EPSS: Низкий
debian логотип

CVE-2021-44420

почти 4 года назад

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, ...

CVSS3: 7.3
EPSS: Низкий
oracle-oval логотип

ELSA-2022-9341

больше 3 лет назад

ELSA-2022-9341: ol-automation-manager security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2023:0005-1

почти 3 года назад

Security update for python-Django

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-v6rh-hp5x-86rv

Potential bypass of an upstream access control based on URL paths in Django

CVSS3: 7.3
0%
Низкий
почти 4 года назад
ubuntu логотип
CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 7.3
0%
Низкий
почти 4 года назад
redhat логотип
CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 5.3
0%
Низкий
почти 4 года назад
nvd логотип
CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS3: 7.3
0%
Низкий
почти 4 года назад
debian логотип
CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, ...

CVSS3: 7.3
0%
Низкий
почти 4 года назад
oracle-oval логотип
ELSA-2022-9341

ELSA-2022-9341: ol-automation-manager security update (IMPORTANT)

больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2023:0005-1

Security update for python-Django

почти 3 года назад

Уязвимостей на страницу