Debian/python-django: medium 5.3
An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially
Action: Upgrade python-django to 3:4.2.23-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3:4.2.23-1 | - |
Fixed versions
| 3:4.2.23-1 |
Sources
- osv: DEBIAN-CVE-2025-48432#Debian:14/python-django
- https://security-tracker.debian.org/tracker/CVE-2025-48432
published · modified · JSON