An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Jun 3, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 3, 2020 |
| Debian | — | Upgrade python-django | Jun 8, 2020 | Jun 3, 2020 |
| Freebsd | — | Upgrade py38-django30Upgrade py38-django22Upgrade py37-django30Upgrade py37-django22Upgrade py36-django30Upgrade py36-django22 | Jun 5, 2020 | Jun 4, 2020 |
| Oracle Solaris | — | Upgrade library/python/django-34 to version 1.11.29-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/python/django-37 to version 2.2.16-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/python/django-27 to version 1.11.29-11.4.27.0.1.82.0 on Solaris 11.4Upgrade legacy/library/python/django-27 to version 1.11.29-11.4.27.0.1.82.0 on Solaris 11.4Upgrade legacy/library/python/django-35 to version 1.11.29-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/python/django-35 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade legacy/library/python/django-34 to version 1.11.29-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/python/django to version 2.2.16-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jun 3, 2020 |
| Ubuntu | — | Upgrade python3-djangoUpgrade python-django (Ubuntu Pro)Upgrade python-django | Jun 4, 2020 | Jun 3, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub