An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7
published June 3, 2020
CVSS
—
EPSS
3%
Percentile
86.8
In the wild
Unconfirmed
What it is
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02897 · 86.8th percentile
Published
2020-06-03T13:13Z
EPSS history
Timeline
03 JUN 13:13Z
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7