Lucene search
Veracode Vulnerability DatabaseVERACODE:27287HistoryOct 01, 2020 - 12:35 a.m.
Cross-site Scripting (XSS)
2020-10-0100:35:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
0.004 Low
EPSS
Percentile
72.4%
djangorestframework is vulnerable to cross-site scripting (XSS). The vulnerability exists as the use of urlize_quoted_links in rest_framework/templates/rest_framework/base.html does not sanitize `
| CPE | Name | Operator | Version |
|---|---|---|---|
| djangorestframework | le | 3.11.1 | |
| djangorestframework | le | 3.11.1 |
References
bugzilla.redhat.com/show_bug.cgi?id=1878635
github.com/advisories/GHSA-fx83-3ph3-9j2q
github.com/encode/django-rest-framework/commit/4121b01b912668c049b26194a9a107c27a332429
github.com/encode/django-rest-framework/pull/7548
security.netapp.com/advisory/ntap-20201016-0003/
www.debian.org/security/2022/dsa-5186
Related
osv
osv
CVE-2020-25626
2020-09-30 20:15:15
PYSEC-2020-263
2020-09-30 20:15:00
Cross-site Scripting (XSS) in Django REST Framework
2021-03-19 21:32:47
suse
suse
Security update for python-djangorestframework (important)
2021-02-25 00:00:00
Security update for python-djangorestframework (important)
2021-02-22 00:00:00
redhatcve
redhatcve
CVE-2020-25626
2020-09-30 16:16:59
cve
cve
CVE-2020-25626
2020-09-30 20:15:15
nessus
nessus
openSUSE Security Update : python-djangorestframework (openSUSE-2021-322)
2021-02-25 00:00:00
Debian DSA-5186-1 : djangorestframework - security update
2022-07-22 00:00:00
ubuntucve
ubuntucve
CVE-2020-25626
2020-09-30 00:00:00
openvas
openvas
openSUSE: Security Advisory for python-djangorestframework (openSUSE-SU-2021:0322-1)
2021-04-16 00:00:00
Debian: Security Advisory (DSA-5186-1)
2022-07-23 00:00:00
prion
prion
Cross site scripting
2020-09-30 20:15:00
debian
debian
[SECURITY] [DSA 5186-1] djangorestframework security update
2022-07-22 12:10:07
[SECURITY] [DSA 5186-1] djangorestframework security update
2022-07-22 13:01:21
nvd
nvd
CVE-2020-25626
2020-09-30 20:15:15
cvelist
cvelist
CVE-2020-25626
2020-09-30 19:24:45
debiancve
debiancve
CVE-2020-25626
2020-09-30 20:15:15
github
github
Cross-site Scripting (XSS) in Django REST Framework
2021-03-19 21:32:47
redhat
redhat