Vulnetix
Try Vulnetix Request Demo
CVE-2021-45116 PUBLISHED

An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.

EPSS 0.35% · 56.9th percentile

Risk Scores

EPSS Score
0.35%
56.9th percentile

Affected Products

VendorProductVersions
Bitnamidjango3.2.0, 4.0.0, 2.2.0
Bitnamidjango2.2.0, 3.2.0, 4.0.0

Timeline

References

Open in Interactive Console →