Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
fedoraFedoraFEDORA:1115A2106441
HistoryApr 28, 2023 - 2:37 a.m.

[SECURITY] Fedora 38 Update: python-django-4.0.10-1.fc38

2023-04-2802:37:47
lists.fedoraproject.org
14
fedora 38
python web framework
rapid development
clean design
dry principle
unix

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.183 Low

EPSS

Percentile

96.2%

JSON

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don’t Repeat Yourself) principle.

OSVersionArchitecturePackageVersionFilename
Fedora38anypython-django< 4.0.10UNKNOWN

Related

openvas 29
nessus 30
fedora 4
debian 5
osv 31
mageia 3
freebsd 6
redhat 6
redos 1
altlinux 4
archlinux 1
ubuntu 4
hackerone 2
githubexploit 10
alpinelinux 6
nvd 5
debiancve 6
ubuntucve 6
suse 1
github 7
redhatcve 6
cnvd 1
prion 6
veracode 6
cvelist 6
cve 6
jvn 1
openvas
openvas
Fedora: Security Advisory for python-django (FEDORA-2023-8fed428c5e)
2023-04-29 00:00:00
Fedora: Security Advisory for python-django (FEDORA-2023-a53ab7c969)
2023-04-29 00:00:00
Debian: Security Advisory (DSA-5254-1)
2022-10-16 00:00:00
nessus
nessus
Fedora 38 : python-django (2023-a53ab7c969)
2023-04-28 00:00:00
Fedora 37 : python-django (2023-8fed428c5e)
2023-04-28 00:00:00
Debian DSA-5254-1 : python-django - security update
2022-10-16 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: python-django-4.0.10-1.fc37
2023-04-28 02:04:16
[SECURITY] Fedora 36 Update: python-django3-3.2.18-1.fc36
2023-03-05 00:54:12
[SECURITY] Fedora 37 Update: python-django3-3.2.18-1.fc37
2023-03-05 01:38:46
debian
debian
[SECURITY] [DSA 5254-1] python-django security update
2022-10-15 16:00:48
[SECURITY] [DSA 5465-1] python-django security update
2023-08-03 20:45:41
[SECURITY] [DLA 3329-1] python-django security update
2023-02-20 21:02:30
osv
osv
python-django - security update
2022-10-15 00:00:00
python-django vulnerabilities
2022-04-11 11:36:19
Django denial-of-service vulnerability in internationalized URLs
2022-10-16 12:00:23
mageia
mageia
Updated python-django packages fix security vulnerability
2022-08-13 05:32:35
Updated python-django packages fix security vulnerability
2022-05-19 10:56:04
Updated python-django packages fix security vulnerability
2023-02-07 03:06:39
freebsd
freebsd
Django -- multiple vulnerabilities
2022-04-02 00:00:00
Django -- multiple vulnerabilities
2023-02-01 00:00:00
Django -- multiple vulnerabilities
2022-08-01 00:00:00
redhat
redhat
(RHSA-2022:5702) Important: Red Hat Ansible Automation Platform 2.1.2 security and bug fix update
2022-07-25 18:07:53
(RHSA-2022:5602) Important: RHUI 4.1.1 release - Security Fixes and Enhancement Update
2022-07-19 12:55:39
(RHSA-2022:5703) Important: Red Hat Ansible Automation Platform 1.2 security update
2022-07-25 19:41:55
redos
redos
ROS-20220516-04
2022-05-16 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package python3-module-django version 3.2.15-alt1
2022-08-30 00:00:00
Security fix for the ALT Linux 10 package python3-module-django version 3.2.13-alt1
2022-04-12 00:00:00
Security fix for the ALT Linux 10 package python3-module-django version 3.2.18-alt1
2023-03-31 00:00:00
archlinux
archlinux
[ASA-202204-9] python-django: sql injection
2022-04-12 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2022-04-11 00:00:00
Django vulnerability
2022-08-04 00:00:00
Django vulnerability
2022-10-04 00:00:00
hackerone
hackerone
Internet Bug Bounty: potential denial of service attack via the locale parameter
2022-10-21 21:33:21
Internet Bug Bounty: Potential DoS vulnerability in Django in multipart parser
2023-03-13 22:26:29
githubexploit
githubexploit
Exploit for SQL Injection in Djangoproject Django
2022-07-13 13:02:41
Exploit for SQL Injection in Djangoproject Django
2022-08-24 07:29:30
Exploit for SQL Injection in Djangoproject Django
2022-04-25 08:27:34
alpinelinux
alpinelinux
CVE-2022-34265
2022-07-04 16:15:09
CVE-2023-24580
2023-02-15 01:15:10
CVE-2022-36359
2022-08-03 14:15:08
nvd
nvd
CVE-2022-36359
2022-08-03 14:15:08
CVE-2022-41323
2022-10-16 06:15:09
CVE-2023-24580
2023-02-15 01:15:10
debiancve
debiancve
CVE-2022-36359
2022-08-03 14:15:08
CVE-2023-24580
2023-02-15 01:15:10
CVE-2022-28346
2022-04-12 05:15:06
ubuntucve
ubuntucve
CVE-2022-36359
2022-08-03 00:00:00
CVE-2022-28347
2022-04-11 00:00:00
CVE-2022-28346
2022-04-11 00:00:00
suse
suse
Security update for python-Django (important)
2022-08-27 00:00:00
github
github
Django vulnerable to Reflected File Download attack
2022-08-11 14:49:12
django-sendfile2 before 0.7.0 contains reflected file download vulnerability
2022-08-11 18:12:35
SQL Injection in Django
2022-04-13 00:00:33
redhatcve
redhatcve
CVE-2022-41323
2022-10-19 12:17:57
CVE-2022-28347
2022-04-11 12:50:15
CVE-2023-24580
2023-02-15 07:32:10
cnvd
cnvd
Django denial of service vulnerability
2022-10-11 00:00:00
prion
prion
Design/Logic Flaw
2023-02-15 01:15:00
Sql injection
2022-04-12 05:15:00
Code injection
2022-10-16 06:15:00
veracode
veracode
Denial Of Service (DoS)
2023-02-15 03:04:41
SQL Injection
2022-04-13 16:28:39
Information Disclosure
2022-08-04 06:24:41
cvelist
cvelist
CVE-2023-24580
2023-02-15 00:00:00
CVE-2022-41323
2022-10-16 00:00:00
CVE-2022-28347
2022-04-12 00:00:00
cve
cve
CVE-2022-28347
2022-04-12 05:15:07
CVE-2022-36359
2022-08-03 14:15:08
CVE-2022-41323
2022-10-16 06:15:09
jvn
jvn
JVN#12610194: Django Extract and Trunc functions vulnerable to SQL injection
2022-07-12 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.183 Low

EPSS

Percentile

96.2%

JSON
Related for FEDORA:1115A2106441
openvas29nessus30fedora4debian5osv31mageia3freebsd6redhat6redos1altlinux4archlinux1ubuntu4hackerone2githubexploit10alpinelinux6nvd5debiancve6ubuntucve6suse1github7redhatcve6cnvd1prion6veracode6cvelist6cve6jvn1