Security Advisory

CVE-2024-21520

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-06-26 05:00:02

Last updated 2024-12-31 10:10:34

Assigner snyk

CVSS score 6.1

State PUBLISHED

Description

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

← Browse all CVEs View on cve.org ↗