Published: 30/09/2020 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

A flaw was found in Django REST Framework versions prior to 3.12.0 and prior to 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
encode django rest framework
redhat ceph storage 2.0
debian debian linux 11.0

Debian Bug report logs - #971554 djangorestframework: CVE-2020-25626 Package: src:djangorestframework; Maintainer for src:djangorestframework is Debian Python Modules Team <python-modules-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 1 Oct 2020 18:45:01 UTC Severity: ...

Synopsis Moderate: security update - Red Hat Ansible Tower 373-1 - RHEL7 Container Type/Severity Security Advisory: Moderate Topic Red Hat Ansible Tower 373-1 - RHEL7 Container Description Updated to the latest version of the git-python library to no longer cause certain jobs to fail U ...

Synopsis Moderate: security update - Red Hat Ansible Tower 366-1 - RHEL7 Container Type/Severity Security Advisory: Moderate Topic Red Hat Ansible Tower 366-1 - RHEL7 Container Description Fixed an XSS vulnerability (CVE-2020-25626) Fixed the Red Hat sosreport tool to no longer include ...

Two cross-site scripting vulnerabilities were discovered in the Django Rest Framework, a toolkit to build web APIs For the oldstable distribution (buster), this problem has been fixed in version 390-1+deb10u1 The stable distribution (bullseye) is not affected We recommend that you upgrade your djangorestframework packages For the detailed sec ...

CWE-79 https://bugzilla.redhat.com/show_bug.cgi?id=1878635 https://security.netapp.com/advisory/ntap-20201016-0003/https://www.debian.org/security/2022/dsa-5186 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971554 https://www.debian.org/security/2022/dsa-5186 https://nvd.nist.gov

CVE-2020-25626

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect