FLAT-8IWAE – Vulnerability | Fluid Attacks Database

Database

Description

insufficient validation

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	python-django	>=0 <2:2.2.9-1	2:2.2.9-1
alpine v3.8	py-django	>=0 <1.11.27-r0	1.11.27-r0
alpine v3.12	py3-django	>=0 <1.11.27-r0	1.11.27-r0
pypi	django	>=0 <1.11.27 \|\| >=2.0 <2.2.9 \|\| >=3.0 <3.0.1	1.11.27, 2.2.9, 3.0.1
alpine v3.9	py-django	>=0 <1.11.27-r0	1.11.27-r0
alpine v3.11	py3-django	>=0 <1.11.27-r0	1.11.27-r0
debian 12	python-django	>=0 <2:2.2.9-1	2:2.2.9-1
alpine v3.10	py-django	>=0 <1.11.27-r0	1.11.27-r0
debian 13	python-django	>=0 <2:2.2.9-1	2:2.2.9-1
alpm rolling_release	python-django	>=2.2.6-1 <2.2.9-1	2.2.9-1

Aliases

1. CVE-2019-198442. NVD-2019-198443. OSV-DEBIAN-2019-198444. OSV-2019-198445. OSV-ALPINE-2019-198446. GHSA-vfq6-hq5r-27r67. GCVE-2019-198448. SECURITY-TRACKER-CVE-2019-198449. SECURITY-CVE-2019-1984410. security.gentoo.org

References

1. https://www.exploit-db.com/exploits/478792. https://github.com/ryu22e/django_cve_2019_19844_poc3. https://github.com/django/django/commit/302a4ff1e8b1c798aab97673909c7a3dfda42c264. https://github.com/django/django/commit/4d334bea06cac63dc1272abcec545b85136cca0e5. https://github.com/django/django/commit/5b1fbcef7a8bec991ebe7b2a18b5d5a95d72cb706. https://github.com/django/django/commit/f4cff43bf921fcea6a29b726eb66767f67753fa27. https://www.djangoproject.com/weblog/2019/dec/18/security-releases8. https://www.debian.org/security/2020/dsa-45989. https://usn.ubuntu.com/4224-110. https://security.netapp.com/advisory/ntap-20200110-000311. https://seclists.org/bugtraq/2020/Jan/912. https://lists.fedoraproject.org/archives/list/[email protected]/message/HCM2DPUI7TOZWN4A6JFQFUVQ2XGE7GUD13. https://groups.google.com/forum/#!topic/django-announce/3oaB2rVH3a014. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-16.yaml15. https://docs.djangoproject.com/en/dev/releases/security16. http://packetstormsecurity.com/files/155872/Django-Account-Hijack.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.