CVE-2021-45116

Name of the Vulnerable Software and Affected Versions Django versions 2.2 before 2.2.26 Django versions 3.2 before 3.2.11 Django versions 4.0 before 4.0.1

Description The issue is related to the dictsort template filter in Django, which could potentially lead to information disclosure or an unintended method call if passed a suitably crafted key. This is due to the leveraging of the Django Template Language's variable resolution logic. The vulnerability may allow a remote attacker to obtain confidential system information.

Recommendations For Django versions 2.2 before 2.2.26, update to version 2.2.26 or later. For Django versions 3.2 before 3.2.11, update to version 3.2.11 or later. For Django versions 4.0 before 4.0.1, update to version 4.0.1 or later. As a temporary workaround, consider restricting the use of the dictsort template filter until a patch is available.