Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/22 12:00 a.m.•3 views

CVE-2020-35681: Exposure of Sensitive Information to an Unauthorized Actor

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

7.4CVSS5.9AI score0.02658EPSS
SaveExploits1References2
Rows per page
Query Builder