Cross-site Scripting (XSS) in Django REST Framework

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-25626 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• GitHub Advisory GHSA-fx83-3ph3-9j2q · ADVISORY
• encode/django-rest-framework · PACKAGE
• pypa/advisory-database · WEB
• security.netapp.com/advisory/ntap-20201016-0003 · WEB
• debian.org/security/2022/dsa-5186 · WEB
• security.netapp.com/advisory/ntap-20201016-0003 · Third Party Advisory

Lỗ hổng khác của djangorestframework

• CVE-2026-114138CAO 7.5Django REST framework is a toolkit for building Web APIs. Prior to 3.18.2, DefaultContentNegotiation.get_accept_list in rest_framework/negot…
• CVE-2026-114137CAO 7.4Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.p…
• CVE-2026-114136CAO 7.5Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/parsers.py uses the cl…
• CVE-2026-73229TRUNG BÌNH 4.3Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's rest_framework/rend…
• CVE-2026-73228TRUNG BÌNH 5.3Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in rest_framework/re…