Django-rest-framework

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Django-rest-framework records in CISA KEV

No Django-rest-framework vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Django Rest Framework · all components

TI-2018-15272 CVE-2018-25045 · GHSA-xqcf-hj92-967m

LOW 29

Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00779 Published 2022-07-23 Fixed in 3.9.1 CWE-79