4.3
Moyenne
CVE-2026-73229 Django REST framework is a powerful and flexible toolkit for building Web APIs
Description
Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's rest_framework/renderers.py AdminRenderer.render() uses override_method() to simulate GET and directly invokes view.get() without view.check_permissions() while rendering an invalid write request, allowing a 400 Bad Request HTML response to disclose data from a GET representation that the requester is not permitted to access. This issue is fixed in version 3.17.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| django-rest-framework 3.17 | premières → < 3.17.2 | 3.17.2 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de django-rest-framework
Les 5 CVE de django-rest-framework →
CVE-2026-114138
Django REST framework is a toolkit for building Web APIs
7.5
Élevée
CVE-2026-114137
Django REST framework is a toolkit for building Web APIs
7.4
Élevée
CVE-2026-114136
Django REST framework is a toolkit for building Web APIs
7.5
Élevée
CVE-2026-73228
Django REST framework is a toolkit for building Web APIs
5.3
Moyenne