An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-01-04T23:12:43

Updated: 2024-08-04T04:39:20.434Z

Reserved: 2021-12-16T00:00:00

Link: CVE-2021-45116

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-01-05T00:15:07.953

Modified: 2024-11-21T06:31:59.500

Link: CVE-2021-45116

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-01-04T00:00:00Z

Links: CVE-2021-45116 - Bugzilla