PT-2022-8057 · Unknown · Django Rest Framework

CVE-2018-25045

Published

2022-07-22

Updated

2026-07-06

CVSS v3.1

6.1

Medium

Vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Django REST framework versions prior to 3.9.1

Description The issue allows for XSS because the default DRF Browsable API view templates disable autoescaping.

Recommendations For versions prior to 3.9.1, update to version 3.9.1 or later to resolve the issue.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2018-25045

DSA-5186-1

GHSA-XQCF-HJ92-967M

PYSEC-2026-804

Django Rest Framework