Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-13596
6.1
MEDIUMCVSS v3
Published
June 3, 2020
CVSS v2
4.3 MEDIUM
Affected
9 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.>= 3.0, < 3.0.7, >= 2.2, < 2.2.13NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.>= 3.0, < 3.0.7, >= 2.2, < 2.2.13NVD
django
Docker Hub
NPM
Crates.io
RubyGems