Django Rest Framework CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2024-21520

djangorestframework: Cross-site Scripting (XSS) via break_long_headers

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

CVSS 4.0 · 5.3 Medium EPSS 1.1% KEV · Not listed

Vendors

Django-rest-framework Redhat

Products

Django Rest Framework Ansible Automation Platform

CVE-2018-25045

Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Django-rest-framework

Products

Django Rest Framework

Page 1 of 1.