CVE:CVE-2021-44420
CNNVD:CNNVD-202112-422
Django是Django基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。
Django 存在安全漏洞，该漏洞源于带有尾随换行符的URL的HTTP请求可以绕过基于URL路径的上游访问控制。以下产品及版本受到影响：Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10。
solution:Upgrade djangoproject django to a higher version than 2.2.25,3.1.14,3.2.10,and avoid the version [2.2,2.2.25),[3.1,3.1.14),[3.2,3.2.10); Upgrade redhat satellite to a higher version than 6.0,and avoid the version 6.0; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade canonical ubuntu_linux to a higher version than 20.04,21.04,21.10,and avoid the version 20.04,21.04,21.10; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35