cve/2024/CVE-2024-21520.md
2024-08-30 20:52:42 +00:00

877 B

CVE-2024-21520

Description

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with
tags.

POC

Reference

Github