python-django vulnerabilities (Red Hat)
316 vulnerabilities.
-
python-djangoRed Hat GitPython before 3.1.59 Arbitrary File Read via TagReference.create 7.1 High -
python-djangoRed Hat GitPython before 3.1.59 Path Traversal via separate-git-dir 8.7 High -
python-djangoRed Hat Awx: notification backends allow ssrf and credential leakage 7.7 High -
python-djangoRed Hat Awx: project archive extraction allows path traversal file writes 7.2 High -
python-djangoRed Hat Awx: webhook status callback ssrf leaks the git pat 7.7 High -
python-djangoRed Hat Server-side file-write and request forgery via spatial lookups 8.7 High -
python-djangoRed Hat AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) 7.1 High -
python-djangoRed Hat GitPython before 3.1.57 Arbitrary File Overwrite and Read 7.2 High -
python-djangoRed Hat GitPython before 3.1.52 Environment Variable Exfiltration via clone_from 8.7 High -
python-djangoRed Hat GitPython before 3.1.51 Command Injection via unguarded Git options 8.6 High -
python-djangoRed Hat GitPython before 3.1.51 Command Injection via option prefix abbreviation 8.7 High -
python-djangoRed Hat GitPython 3.1.50 Authentication Bypass via Joined Short Options 9.3 Critical -
python-djangoRed Hat pyasn1: Uncontrolled resource consumption when converting decoded REAL values 7.5 High -
python-djangoRed Hat form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection) 8.7 High -
python-djangoRed Hat Awxkit: path traversal via yaml !include directive 4.7 Medium -
python-djangoRed Hat Unbounded WebSocket message and frame sizes can cause unauthenticated remote denial of service 5.3 Medium -
python-djangoRed Hat AIOHTTP Vulnerable to Deserialization of Untrusted Data 6.4 Medium -
python-djangoRed Hat tmp: Path Traversal via unsanitized prefix/postfix enables directory escape 7.7 High -
python-djangoRed Hat JWCrypto: JWE ZIP decompression bomb 5.3 Medium -
python-djangoRed Hat Forman: foreman: remote code execution via command injection in websocket proxy 8.0 High -
python-djangoRed Hat Rubygem-katello: katello: denial of service and potential information disclosure via sql injection 5.4 Medium -
python-djangoRed Hat Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username 8.3 High -
python-djangoRed Hat Potential SQL injection via QuerySet.order_by and FilteredRelation 5.4 Medium -
python-djangoRed Hat Potential SQL injection in column aliases via control characters 5.4 Medium -
python-djangoRed Hat Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods 7.5 High -
python-djangoRed Hat Potential SQL injection via raster lookups on PostGIS 5.4 Medium -
python-djangoRed Hat Potential denial-of-service vulnerability via repeated headers when using ASGI 7.5 High -
python-djangoRed Hat Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation 8.1 High -
python-djangoRed Hat Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification 8.1 High -
python-djangoRed Hat Unexpected session resumption in crypto/tls 10.0 Critical -
python-djangoRed Hat Brotli decompression bomb DoS in scrapy/scrapy 7.5 High -
python-djangoRed Hat cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer... 9.8 Critical -
python-djangoRed Hat Remote code execution when loading a crafted GraphQL schema 9.1 Critical -
python-djangoRed Hat Local File Inclusion in Rack::Static 7.5 High -
python-djangoRed Hat Django is subject to SQL injection through its column aliases 7.1 High -
python-djangoRed Hat Django vulnerable to Allocation of Resources Without Limits or Throttling 5.0 Medium -
python-djangoRed Hat Django has a potential denial-of-service vulnerability in IPv6 validation 5.8 Medium -
python-djangoRed Hat Jinja has a sandbox breakout through indirect reference to format method 5.4 Medium -
python-djangoRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
python-djangoRed Hat Rexml: rexml: denial of service via inefficient regex parsing 7.5 High -
python-djangoRed Hat REXML ReDoS vulnerability 6.6 Medium -
python-djangoRed Hat Memory leak 7.2 High -
python-djangoRed Hat Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api 7.5 High -
python-djangoRed Hat Automation-controller: gain access to the k8s api server via job execution with container group 6.6 Medium -
python-djangoRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
python-djangoRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
python-djangoRed Hat Pulpcore: rbac permissions incorrectly assigned in tasks that create objects 6.7 Medium -
python-djangoRed Hat Django SQL injection vulnerability 7.3 High -
python-djangoRed Hat Django vulnerable to denial-of-service attack 7.5 High -
python-djangoRed Hat Django vulnerable to a denial-of-service attack 7.5 High - Show olderLoading…