Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-21520

Опубликовано: 26 июн. 2024
Источник: nvd
CVSS3: 6.1
EPSS Средний

Описание

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with
tags.

EPSS

Процентиль: 95%
0.16271
Средний

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 1 года назад

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

CVSS3: 6.1
redhat
больше 1 года назад

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

CVSS3: 6.1
debian
больше 1 года назад

Versions of the package djangorestframework before 3.15.2 are vulnerab ...

CVSS3: 6.1
github
больше 1 года назад

Cross-site Scripting in djangorestframework

EPSS

Процентиль: 95%
0.16271
Средний

6.1 Medium

CVSS3

Дефекты

CWE-79