Lucene search

K
cvelistMitreCVELIST:CVE-2015-2241
HistoryMar 12, 2015 - 2:00 p.m.

CVE-2015-2241

2015-03-1214:00:00
mitre
raw.githubusercontent.com
1

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonly_fields, as demonstrated by a @property.

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%