ROS-20220112-04

A vulnerability in the Django web application framework is related to excessive data output by the application during the
processing error conditions. Exploitation of the vulnerability could allow an attacker acting remotely,
to obtain sensitive system information.

Django web application framework vulnerability is related to incorrect path name restriction
to a restricted directory (“path traversal”). Exploitation of the vulnerability could allow an attacker acting
remotely, pass a specially crafted HTTP filename to the application and write the file outside the intended
directory.

The vulnerability in the Django web application framework is related to a resource management error in evaluating the
sent password. Exploitation of the vulnerability could allow an attacker, acting remotely,
to send a specially crafted password to an application and perform a denial of service (DoS) attack.