Vulnerabilities (CVE)

Filtered by vendor Django-rest-framework Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-25045 1 Django-rest-framework 1 Django Rest Framework 2024-02-28 N/A 6.1 MEDIUM
Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.