Lucene search

K
redhatcveRedhat.comRH:CVE-2020-13596
HistoryJun 03, 2020 - 4:52 p.m.

CVE-2020-13596

2020-06-0316:52:25
redhat.com
access.redhat.com
20

EPSS

0.016

Percentile

87.7%

A flaw was found in Django, where the query parameters for the admin widget ForeignKeyRawIdWidget were not properly URL encoded. This flaw allows an attacker to perform a Cross-site scripting (XSS) attack. The highest threat from this vulnerability is to confidentiality.