django-rest-framework records
2 published records for vendor django-rest-framework.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2018-25045No exploit | Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoedjango-rest-framework · django rest framework · CWE-79 | Medium6.1 | — | 0.7% | Jul 22, 2022 |
8Monitor | CVE-2024-21520Proof of concept | Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template fCWE-79 | Low2.1 | — | 1.1% | Jun 26, 2024 |
- CVE-2018-2504524Monitor
Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoe
MediumCVSS 6.1No exploitEPSS 0%django-rest-framework · django rest frameworkJul 22, 2022
- CVE-2024-215208Monitor
Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template f
LowCVSS 2.1Proof of conceptEPSS 1%Jun 26, 2024