Debian/python-django: medium 5.3
An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially
Action: Upgrade python-django to 3:3.2.25-0+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3:3.2.25-0+deb12u1 | - |
Fixed versions
| 3:3.2.25-0+deb12u1 |
Sources
published · modified · JSON