Django REST framework XSS Vulnerability

MEDIO 6.1CVE-2018-25045 · GHSA-xqcf-hj92-967m · PYSEC-2026-804 · Published 23/07/2022 · updated 17/06/2026

In breve

CVE-2018-25045 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda django-rest-framework, django rest framework (django-rest-framework).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.78%, superiore al 56.1% delle vulnerabilità.
Correzione: aggiornare a 3.9.1 o successiva.

Package	Affected versions	Patched versions
django-rest-framework PyPI	`< 3.9.1`	`3.9.1`
django rest framework django-rest-framework	`< 3.9.1`	`3.9.1`

Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.

NVD description

Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.