Lucene search

K
osvGoogleOSV:GHSA-C87F-FQ5G-63R2
HistoryOct 12, 2021 - 5:51 p.m.

Cross-site scripting in Unicorn framework

2021-10-1217:51:11
Google
osv.dev
7
unicorn framework
cross-site scripting
django
xss
component name

EPSS

0.001

Percentile

40.8%

The Unicorn framework through 0.35.3 for Django allows XSS via component.name.

EPSS

0.001

Percentile

40.8%