Lucene search
K

9 matches found

RedHat Linux
RedHat Linux
added 2022/12/07 8:29 p.m.4 views

django: Possible XSS via '{% debug %}' template tag

A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...

6.1CVSS7AI score0.00554EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/12/07 7:19 p.m.3 views

django: Possible XSS via '{% debug %}' template tag

A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...

6.1CVSS7AI score0.00554EPSS
Exploits1References5
CNVD
CNVD
added 2022/02/10 12:0 a.m.17 views

Django Cross-Site Scripting Vulnerability (CNVD-2022-31853)

Django is the Django Foundation's set of open source web application framework based on the Python language. The framework includes an object-oriented mapper, view system, template system, etc. A cross-site scripting vulnerability exists in Django, which stems from the product's % debug %...

6.1CVSS1.8AI score0.00554EPSS
Exploits1References1
Veracode
Veracode
added 2022/02/07 6:45 p.m.43 views

Cross-site Scripting (XSS)

python-django is vulnerable to cross-site scripting. The % debug % template tag in the library does not properly encode the current context, allowing an attacker to inject and execute malicious javascript...

6.1CVSS2.8AI score0.00554EPSS
Exploits1References13Affected Software4
ATTACKERKB
ATTACKERKB
added 2022/02/03 2:15 a.m.3 views

CVE-2022-22818

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

6.1CVSS6.8AI score0.00554EPSS
Exploits1References9
OSV
OSV
added 2022/02/03 2:15 a.m.2 views

PYSEC-2022-19

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

6.1CVSS6.8AI score0.00554EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2022/02/03 12:0 a.m.34 views

Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerabilities (USN-5269-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5269-1 advisory. Keryn Knight discovered that Django incorrectly handled certain template tags. A remote attacker could possibly use this issue to perform a...

7.5CVSS6.8AI score0.01058EPSS
Exploits1References3
OSV
OSV
added 2022/02/01 8:0 a.m.3 views

UBUNTU-CVE-2022-22818

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

6.1CVSS6.8AI score0.00554EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2019/07/30 12:0 a.m.1 views

PT-2019-13653 · Openmpt +1 · Libopenmpt +1

Name of the Vulnerable Software and Affected Versions: libopenmpt versions prior to 0.4.2 Description: The issue is related to an assertion failure during file parsing when using debug STLs in libopenmpt. Recommendations: For versions prior to 0.4.2, update to version 0.4.2 or later to resolve th...

6.5CVSS6.4AI score0.0052EPSS
Exploits0References30
Rows per page
Query Builder