Search: CVE-2025-48432

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.0	EPSS 0.8%	CVE-2025-48432djangoproject Django · Log Injection Medium4.0EPSS 0.8%2025-06-05CVE Database V5CVE-2025-48432 An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems. EPSS 0.8%Vulnerability CWE-117	CVE Database V5	2025-06-05

Page 1 of 1 · 1 duplicate CVE record merged