CVE-2018-25045

Published July 23rd, 2022

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.

encode/django-rest-framework

Web APIs for Django. 🎸

GitHub

30.1K