PT-2022-8057

Name of the Vulnerable Software and Affected Versions Django REST framework versions prior to 3.9.1 Description The issue allows for XSS because the default DRF Browsable API view templates disable autoescaping. Recommendations For versions prior to 3.9.1, update to version 3.9.1 or later to...