CVE-2021-44420 log
| Source |
|
| Severity | Low |
| Remote | Yes |
| Type | Access restriction bypass |
| Description | A security issue has been found in Django before version 3.2.10. HTTP requests for URLs with trailing newlines could bypass an upstream access control based on URL paths. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2605 | python-django | 3.2.9-3 | 3.2.10-1 | Low | Fixed |
| References |
|---|
https://www.djangoproject.com/weblog/2021/dec/07/security-releases/ https://github.com/django/django/commit/333c65603032c377e682cdbd7388657a5463a05a |