Lucene search
+L

3 matches found

NVD
NVD
•added 2021/10/11 1:15 a.m.•27 views

CVE-2021-42134

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...

6.1CVSS0.00699EPSS
SaveExploits0References2
CVE
CVE
•added 2021/10/11 12:55 a.m.•90 views

CVE-2021-42134

The CVE-2021-42134 entry refers to the Unicorn framework for Django (pre-0.36.1) being vulnerable to cross-site scripting via a component (component or component.name). The issue notes that this XSS stems from an incomplete fix for CVE-2021-42053, indicating the root cause is a fix that did not f...

6.1CVSS5.3AI score0.00699EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/11 12:00 a.m.•3 views

CVE-2021-42134: Improper Neutralization of Input During Web Page Generation

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...

6.1CVSS5.8AI score0.00699EPSS
SaveExploits0References2
Rows per page
Query Builder