djangoproject

Records172All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high52CVSS 7.0–8.9

Exploited now

djangoproject records in CISA KEV

No djangoproject vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Channels · all components

TI-2020-18152 CVE-2020-35681 · GHSA-v542-8q9x-cffc

LOW 37

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02658 Published 2021-02-22 Fixed in 3.0.3 CWE-200