| Package | Affected versions | Patched versions |
|---|---|---|
| django | ≥ 2.2, < 2.2.13≥ 2.2a1, < 2.2.13≥ 3.0, < 3.0.7≥ 3.0a1, < 3.0.7 | 2.2.133.0.7 |
| django | ≥ 2.2, < 2.2.13≥ 3.0, < 3.0.7 | 2.2.133.0.7 |
| zfs storage appliance kit | = 8.8 |
An issue was discovered in Django version 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free