Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Django Improper Authentication Vulnerability (CVE-2021-44420) - Vulnerability Database

Django Improper Authentication Vulnerability (CVE-2021-44420)

Description

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

References

CVE-2021-44420

Related Vulnerabilities

Artifactory Improper Privilege Management Vulnerability (CVE-2022-0668) Critical
Common tags: Missing Update Known Vulnerabilities
SharePoint Download of Code Without Integrity Check Vulnerability (CVE-2020-1453) High
Common tags: Missing Update Known Vulnerabilities
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1345) Medium
Common tags: Missing Update Known Vulnerabilities
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2020-1439) High
Common tags: Missing Update Known Vulnerabilities
SharePoint CVE-2020-1440 Vulnerability (CVE-2020-1440) Medium
Common tags: Missing Update Known Vulnerabilities

Severity

High

Classification

CVE-2021-44420
CWE-287
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Tags

Missing Update
Known Vulnerabilities