CVE-2022-22818
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This m...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
django
[{"type":"SEMVER","events":[{"introduced":"2.2.0"},{"fixed":"2.2.27"},{"introduced":"3.2.0"},{"fixed":"3.2.12"},{"introduced":"4.0.0"},{"fixed":"4.0.2"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-22818 python-django Corrigé dans: 2:2.2.28-1~deb11u1
Références
- advisory docs.djangoproject.com
- advisory security.netapp.com
- advisory debian.org
- advisory djangoproject.com
- web groups.google.com
- web lists.fedoraproject.org
- web nvd.nist.gov