Published: 03/02/2022 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The {% debug %} template tag in Django 2.2 prior to 2.2.27, 3.2 prior to 3.2.12, and 4.0 prior to 4.0.2 does not properly encode the current context. This may lead to XSS.

Vulnerable Product	Search on Vulmon	Subscribe to Product
djangoproject django
fedoraproject fedora 35
debian debian linux 11.0

Debian Bug report logs - #1004752 python-django: CVE-2022-22818 CVE-2022-23833 Package: python-django; Maintainer for python-django is Debian Python Team <team+python@trackerdebianorg>; Source for python-django is src:python-django (PTS, buildd, popcon) Reported by: "Chris Lamb" <lamby@debianorg> Date: Tue, 1 Feb ...

Several security issues were fixed in Django ...

Synopsis Moderate: Red Hat OpenStack Platform 1624 (python-django20) security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-django20 is now available for Red Hat OpenStackPlatform 1624 (Tr ...

Synopsis Important: Satellite 612 Release Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update is now available for Red Hat Satellite 612 The release contains a new version of Satellite and important security fixe ...

Synopsis Moderate: Satellite 611 Release Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update is now available for Red Hat Satellite 611 Description Red Hat Satellite is a systems management tool for Linux-basedin ...

Synopsis Important: Red Hat OpenStack Platform 1619 (python-django20) security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-django20 is now available for Red Hat OpenStackPlatform 1619 ( ...

Multiple security issues were found in Django, a Python web development framework, which could result in denial of service, SQL injection or cross-site scripting For the stable distribution (bullseye), these problems have been fixed in version 2:2228-1~deb11u1 We recommend that you upgrade your python-django packages For the detailed security ...

Severity Unknown Remote Unknown Type Unknown Description AVG-2808 python-django 3210-1 402-1 Unknown Fixed ...

oss-sec mailing list archives   By Date By Thread </form>    Django: CVE-2022-22818: Possible XSS via {% debug %} template tag   From: ...

CWE-79 https://docs.djangoproject.com/en/4.0/releases/security/https://www.djangoproject.com/weblog/2022/feb/01/security-releases/https://security.netapp.com/advisory/ntap-20220221-0003/https://www.debian.org/security/2022/dsa-5254 https://groups.google.com/forum/#%21forum/django-announce https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1004752 https://nvd.nist.gov https://ubuntu.com/security/notices/USN-5269-1 https://ubuntu.com/security/notices/USN-5269-2

CVE-2022-22818

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect