An issue exists in Django 2.2 prior to 2.2.26, 3.2 prior to 3.2.11, and 4.0 prior to 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
djangoproject django |
||
fedoraproject fedora 35 |
Vulmon