1 matches found
CVE-2020-35681: Exposure of Sensitive Information to an Unauthorized Actor
Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...
7.4CVSS5.9AI score0.02658EPSS
SaveExploits1References2
20