Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-36359
8.8
HIGHCVSS v3
Published
August 3, 2022
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is derived from user-supplied input.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.>= 4.0, < 4.0.7, >= 3.2, < 3.2.15NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.>= 4.0, < 4.0.7, >= 3.2, < 3.2.15NVD
django
Docker Hub
NPM