Lucene search

K
cvelistMitreCVELIST:CVE-2020-13596
HistoryJun 03, 2020 - 1:13 p.m.

CVE-2020-13596

2020-06-0313:13:55
mitre
www.cve.org

6.1 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.7%

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack.