Red Hat Security AdvisoryRHSA-2022:8872
Red Hat OpenStack Platform 16.1.9 (python-django20) security update
Released 2022-12-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 16.1 python-django20-2.0.13-18.el8ost, python-django20-bash-completion-2.0.13-18.el8ost, python3-django20-2.0.13-18.el8ost
Fixes 3 records
Priority MEDIUM 64
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.49527 · Published 2022-02-03 · Partial fix · 2.2.27, 3.2.12 +1 CWE-835
Priority MEDIUM 60
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.18661 · Published 2022-04-12 · Partial fix · 2.2.28, 3.2.13 +1 CWE-89
Priority LOW 33
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03356 · Published 2022-02-03 · Partial fix · 2.2.27, 3.2.12 +1 CWE-79
