FLAT-0OKQ5 – Vulnerability | Fluid Attacks Database

Database

Description

silent downgrade

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
pypi	django	>=2.1 <2.1.10 \|\| >=2.2 <2.2.3 \|\| >=1.11 <1.11.22	2.1.10, 2.2.3, 1.11.22
alpine v3.9	py-django	>=0 <1.11.22-r0	1.11.22-r0
debian 12	python-django	>=0 <1:1.11.22-1	1:1.11.22-1
alpine v3.10	py-django	>=0 <1.11.22-r0	1.11.22-r0
alpine v3.11	py3-django	>=0 <1.11.22-r0	1.11.22-r0
alpine v3.8	py-django	>=0 <1.11.22-r0	1.11.22-r0
alpine v3.12	py3-django	>=0 <1.11.22-r0	1.11.22-r0
alpine v3.7	py-django	>=0 <1.11.22-r0	1.11.22-r0
debian 14	python-django	>=0 <1:1.11.22-1	1:1.11.22-1
debian 13	python-django	>=0 <1:1.11.22-1	1:1.11.22-1

1-10 of 11

10

Aliases

1. CVE-2019-127812. NVD-2019-127813. OSV-2019-127814. OSV-ALPINE-2019-127815. OSV-DEBIAN-2019-127816. GHSA-6c7v-2f49-8h267. GCVE-2019-127818. SECURITY-CVE-2019-127819. SECURITY-TRACKER-CVE-2019-12781

References

1. https://docs.djangoproject.com/en/dev/releases/security2. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-10.yaml3. https://groups.google.com/forum/#!topic/django-announce/Is4kLY9ZcZQ4. https://lists.fedoraproject.org/archives/list/[email protected]/message/5VXXWIOQGXOB7JCGJ3CVUW673LDHKEYL5. https://seclists.org/bugtraq/2019/Jul/106. https://security.netapp.com/advisory/ntap-20190705-00027. https://usn.ubuntu.com/4043-18. https://www.debian.org/security/2019/dsa-44769. https://www.djangoproject.com/weblog/2019/jul/01/security-releases10. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html11. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html12. http://www.openwall.com/lists/oss-security/2019/07/01/3

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.