BIT-django-2021-45116

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/django/BIT-django-2021-45116.json
JSON Data
https://api.test.osv.dev/v1/vulns/BIT-django-2021-45116
Aliases
Published
2024-03-06T10:53:49.679Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details

An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.

Database specific
{
    "cpes": [
        "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}
References

Affected packages

Bitnami / django

Package

Name
django
Purl
pkg:bitnami/django

Severity

  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
2.2.0
Fixed
2.2.26
Introduced
3.2.0
Fixed
3.2.11
Introduced
4.0.0
Fixed
4.0.1