Red Hat Security AdvisoryRHSA-2022:8853
Red Hat OpenStack Platform 16.2.4 (python-django20) security update
Released 2022-12-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 16.2 python-django20-2.0.13-18.el8ost, python3-django20-2.0.13-18.el8ost
Fixes 2 records
Priority MEDIUM 64
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.49527 · Published 2022-02-03 · Partial fix · 2.2.27, 3.2.12 +1 CWE-835
Priority LOW 33
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03356 · Published 2022-02-03 · Partial fix · 2.2.27, 3.2.12 +1 CWE-79
