Cross-site Scripting (XSS)

🗓️ 07 Feb 2022 18:45:32Reported by Veracode Vulnerability DatabaseType

python-django library XSS vulnerabilit

Reporter	Title	Published	Views	Family All 153
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.12-alt1	25 Feb 202200:00	–	altlinux
ATTACKERKB	CVE-2022-22818	3 Feb 202202:15	–	attackerkb
AlpineLinux	CVE-2022-22818	3 Feb 202200:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Python-Django	3 May 202623:59	–	astralinux
BDU FSTEC	The vulnerability of the Django web application framework, related to the lack of protection for website structure, allows attackers to carry out cross-site scripting attacks.	4 Feb 202200:00	–	bdu_fstec
Circl	CVE-2022-22818	3 Feb 202207:29	–	circl
CNNVD	Django 跨站脚本漏洞	1 Feb 202200:00	–	cnnvd
CNVD	Django Cross-Site Scripting Vulnerability (CNVD-2022-31853)	10 Feb 202200:00	–	cnvd
CVE	CVE-2022-22818	3 Feb 202200:00	–	cve
Cvelist	CVE-2022-22818	3 Feb 202200:00	–	cvelist

Vulners

Node

python-django python-djangoMatch1:1.10.7-2+deb9u9debian

AND

google bionicMatch1:1.11.11-1ubuntu1.9debian

AND

google bionicMatch1:1.11.11-1ubuntu1.14debian

AND

google bionicMatch1:1.11.11-1ubuntu1debian

AND

py3-django py3-djangoMatch3.1.13-r1python

AND

py3-django py3-djangoMatch1.11.29-r0python

AND

AND

AND

AND

py3-django py3-djangoMatch3.1.13-r0python

AND

py3-django py3-djangoMatch1.11.28-r0python

AND

python-django python-djangoMatch1:1.11.29-1~deb10u1debian

AND

django_project djangoRange4.0a1–4.0.1python

django_project djangoRange3.0a1–3.2.11python

django_project djangoRange1.1.3–2.2.26python

Source	Link
github	www.github.com/django/django/commit/394517f07886495efcf79f95c7ee402a9437bd68
github	www.github.com/django/django/commit/01422046065d2b51f8f613409cad2c81b39487e5
github	www.github.com/django/django/commit/1a1e8278c46418bde24c86a65443b0674bae65e2
github	www.github.com/django/django/commit/c27a7eb9f40b64990398978152e62b6ff839c2e6
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-22818
debian	www.debian.org/security/2022/dsa-5254
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
docs	www.docs.djangoproject.com/en/4.0/releases/security/
groups	www.groups.google.com/forum/

07 Nov 2023 22:23Current

2.8Low risk

Vulners AI Score2.8

CVSS 24.3

CVSS 3.16.1

EPSS0.03328