Lucene search
HistoryJul 23, 2022 - 2:15 a.m.
CVE-2018-25045
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
30.8%
Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.
Affected configurations
Node
django-rest-frameworkdjango_rest_frameworkRange<3.9.1
Related
debiancve
debiancve
CVE-2018-25045
2022-07-23 02:15:07
prion
prion
Cross site scripting
2022-07-23 02:15:00
github
github
Django REST framework XSS Vulnerability
2022-07-24 00:00:33
cvelist
cvelist
CVE-2018-25045
2022-07-23 01:43:37
cve
cve
CVE-2018-25045
2022-07-23 02:15:07
ubuntucve
ubuntucve
CVE-2018-25045
2022-07-23 00:00:00
osv
osv
CVE-2018-25045
2022-07-23 02:15:07
Django REST framework XSS Vulnerability
2022-07-24 00:00:33
djangorestframework - security update
2022-07-22 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5186-1)
2022-07-23 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
30.8%
Related for NVD:CVE-2018-25045