cve/2021/CVE-2021-44420.md
2024-05-25 21:48:12 +02:00

624 B

CVE-2021-44420

Description

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

POC

Reference

No PoCs from references.

Github