Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-21520

Опубликовано: 26 июн. 2024
Источник: nvd
CVSS3: 6.1
EPSS Низкий

Описание

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with
tags.

EPSS

Процентиль: 64%
0.01133
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
около 2 лет назад

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

CVSS3: 6.1
redhat
около 2 лет назад

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

CVSS3: 6.1
debian
около 2 лет назад

Versions of the package djangorestframework before 3.15.2 are vulnerab ...

CVSS3: 6.1
github
около 2 лет назад

Cross-site Scripting in djangorestframework

EPSS

Процентиль: 64%
0.01133
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79