Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2024/01/11 5:39 p.m.30 views

CVE-2024-22199 Django Template Engine Vulnerable to XSS

This package provides universal methods to use multiple template engines with the Fiber web framework using the Views interface. This vulnerability specifically impacts web applications that render user-supplied data through this template engine, potentially leading to the execution of malicious...

9.3CVSS9.2AI score0.00484EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/11 12:0 a.m.7 views

PT-2024-19268 · Unknown · Django Template Engine

Name of the Vulnerable Software and Affected Versions: Django template engine for Fiber versions prior to the latest patched version Description: This issue specifically impacts web applications that render user-supplied data through the Django template engine, potentially leading to the executio...

9.3CVSS6.3AI score0.00484EPSS
SaveExploits0References9
PyPA
PyPA
added 2023/02/21 9:15 p.m.10 views

PYSEC-2023-37

Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions earlier than 1.5.7 are impacted by a remote code execution vulnerability. Nautobot did not properly sandbox Jinja2 template rendering. In Nautobot 1.5.7 has enabled sandboxed environments for the...

9.8CVSS8AI score0.01526EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder