Vulnerability	Vulnerable Version
M Improper Output Neutralization for Logs Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the `request.path` function used by HTTP responses, which allows control characters to be written unescaped into logs. An attacker can manipulate log entries and potentially cause log injection or forgery by sending specially crafted URLs. How to fix Improper Output Neutralization for Logs? Upgrade `Django` to version 4.2.22, 5.1.10, 5.2.2 or higher.	[,4.2.22)[5.0a1,5.1.10)[5.2a1,5.2.2)

Improper Output Neutralization for Logs

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design.

Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the request.path function used by HTTP responses, which allows control characters to be written unescaped into logs. An attacker can manipulate log entries and potentially cause log injection or forgery by sending specially crafted URLs.

How to fix Improper Output Neutralization for Logs?

Upgrade Django to version 4.2.22, 5.1.10, 5.2.2 or higher.

[,4.2.22)[5.0a1,5.1.10)[5.2a1,5.2.2)

Go back to all versions of this package