Alpine/py3-django: high 8.8
An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Di
Action: Upgrade py3-django to 3.2.15-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.15-r0 | - |
Fixed versions
| 3.2.15-r0 |
Sources
- osv: ALPINE-CVE-2022-36359#Alpine:v3.24/py3-django
- https://security.alpinelinux.org/vuln/CVE-2022-36359
published · modified · JSON