9 matches found
django: Possible XSS via '{% debug %}' template tag
A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...
django: Possible XSS via '{% debug %}' template tag
A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...
Django Cross-Site Scripting Vulnerability (CNVD-2022-31853)
Django is the Django Foundation's set of open source web application framework based on the Python language. The framework includes an object-oriented mapper, view system, template system, etc. A cross-site scripting vulnerability exists in Django, which stems from the product's % debug %...
Cross-site Scripting (XSS)
python-django is vulnerable to cross-site scripting. The % debug % template tag in the library does not properly encode the current context, allowing an attacker to inject and execute malicious javascript...
CVE-2022-22818
The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...
PYSEC-2022-19
The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...
Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerabilities (USN-5269-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5269-1 advisory. Keryn Knight discovered that Django incorrectly handled certain template tags. A remote attacker could possibly use this issue to perform a...
UBUNTU-CVE-2022-22818
The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...
PT-2019-13653 · Openmpt +1 · Libopenmpt +1
Name of the Vulnerable Software and Affected Versions: libopenmpt versions prior to 0.4.2 Description: The issue is related to an assertion failure during file parsing when using debug STLs in libopenmpt. Recommendations: For versions prior to 0.4.2, update to version 0.4.2 or later to resolve th...