Oval Definition:oval:org.opensuse.security:def:202144420
Revision Date:2022-06-30Version:1
Title:CVE-2021-44420
Description:

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2021-44420
SUSE CVE-2021-44420
Platform(s):openSUSE Tumbleweed
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • python310-sentry-sdk-1.5.4-1.1 is installed
  • OR python38-sentry-sdk-1.5.4-1.1 is installed
  • OR python39-sentry-sdk-1.5.4-1.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE OpenStack Cloud 8 is installed
  • OR SUSE OpenStack Cloud Crowbar 8 is installed
  • AND python-Django is not affected
    • Definition Synopsis
  • Release Information
  • SUSE OpenStack Cloud 9 is installed
  • OR SUSE OpenStack Cloud Crowbar 9 is installed
  • AND python-Django1 is not affected
    • BACK