← Back to CVE List

CVE-2024-21520

Published: 2024-06-26T05:15Z
Last Modified: 2024-12-31T10:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt