Lucene search

PRIOn knowledge basePRION:CVE-2022-22818

HistoryFeb 03, 2022 - 2:15 a.m.

Design/Logic Flaw

2022-02-0302:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%

JSON

The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.

CPENameOperatorVersion
debian_linuxeq11.0
djangoge3.2
djangolt3.2.12
djangoge4.0
djangolt4.0.2
djangoge2.2
djangolt2.2.27
fedoraeq35

Name	Operator	Version
debian_linux	eq	11.0
django	ge	3.2
django	lt	3.2.12
django	ge	4.0
django	lt	4.0.2
django	ge	2.2
django	lt	2.2.27
fedora	eq	35

References

docs.djangoproject.com/en/4.0/releases/security/

groups.google.com/forum/

lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/

security.netapp.com/advisory/ntap-20220221-0003/

www.debian.org/security/2022/dsa-5254

www.djangoproject.com/weblog/2022/feb/01/security-releases/