2 matches found
UBUNTU-CVE-2018-25045
Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...
6.1CVSS5.8AI score0.00779EPSS
SaveExploits0References5
PT-2022-8057
Name of the Vulnerable Software and Affected Versions Django REST framework versions prior to 3.9.1 Description The issue allows for XSS because the default DRF Browsable API view templates disable autoescaping. Recommendations For versions prior to 3.9.1, update to version 3.9.1 or later to...
6.1CVSS6.4AI score0.00779EPSS
SaveExploits0References17
20