CVE-2024-21520

Publication date

2024-06-26 05:00:02

Family

snyk

State

PUBLISHED

Description

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with
tags.