CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25626

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.3%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2020-25626

Encode » Django Rest Framework » Version: N/A

cpe:2.3:a:encode:django_rest_framework:-
Encode » Django Rest Framework » Version: 0.1

cpe:2.3:a:encode:django_rest_framework:0.1
Encode » Django Rest Framework » Version: 0.2.4

cpe:2.3:a:encode:django_rest_framework:0.2.4
Encode » Django Rest Framework » Version: 0.3.0

cpe:2.3:a:encode:django_rest_framework:0.3.0
Encode » Django Rest Framework » Version: 0.3.1

cpe:2.3:a:encode:django_rest_framework:0.3.1
Encode » Django Rest Framework » Version: 0.3.2

cpe:2.3:a:encode:django_rest_framework:0.3.2
Encode » Django Rest Framework » Version: 0.3.3

cpe:2.3:a:encode:django_rest_framework:0.3.3
Encode » Django Rest Framework » Version: 0.4.0

cpe:2.3:a:encode:django_rest_framework:0.4.0
Encode » Django Rest Framework » Version: 2.0.0

cpe:2.3:a:encode:django_rest_framework:2.0.0
Encode » Django Rest Framework » Version: 2.0.1

cpe:2.3:a:encode:django_rest_framework:2.0.1
Encode » Django Rest Framework » Version: 2.0.2

cpe:2.3:a:encode:django_rest_framework:2.0.2
Encode » Django Rest Framework » Version: 2.1.0

cpe:2.3:a:encode:django_rest_framework:2.1.0
Encode » Django Rest Framework » Version: 2.1.1

cpe:2.3:a:encode:django_rest_framework:2.1.1
Encode » Django Rest Framework » Version: 2.1.10

cpe:2.3:a:encode:django_rest_framework:2.1.10
Encode » Django Rest Framework » Version: 2.1.11

cpe:2.3:a:encode:django_rest_framework:2.1.11
Encode » Django Rest Framework » Version: 2.1.12

cpe:2.3:a:encode:django_rest_framework:2.1.12
Encode » Django Rest Framework » Version: 2.1.13

cpe:2.3:a:encode:django_rest_framework:2.1.13
Encode » Django Rest Framework » Version: 2.1.14

cpe:2.3:a:encode:django_rest_framework:2.1.14
Encode » Django Rest Framework » Version: 2.1.15

cpe:2.3:a:encode:django_rest_framework:2.1.15
Encode » Django Rest Framework » Version: 2.1.16

cpe:2.3:a:encode:django_rest_framework:2.1.16
Encode » Django Rest Framework » Version: 2.1.17

cpe:2.3:a:encode:django_rest_framework:2.1.17
Encode » Django Rest Framework » Version: 2.1.2

cpe:2.3:a:encode:django_rest_framework:2.1.2
Encode » Django Rest Framework » Version: 2.1.3

cpe:2.3:a:encode:django_rest_framework:2.1.3
Encode » Django Rest Framework » Version: 2.1.4

cpe:2.3:a:encode:django_rest_framework:2.1.4
Encode » Django Rest Framework » Version: 2.1.5

cpe:2.3:a:encode:django_rest_framework:2.1.5
Encode » Django Rest Framework » Version: 2.1.6

cpe:2.3:a:encode:django_rest_framework:2.1.6
Encode » Django Rest Framework » Version: 2.1.7

cpe:2.3:a:encode:django_rest_framework:2.1.7
Encode » Django Rest Framework » Version: 2.1.8

cpe:2.3:a:encode:django_rest_framework:2.1.8
Encode » Django Rest Framework » Version: 2.1.9

cpe:2.3:a:encode:django_rest_framework:2.1.9
Encode » Django Rest Framework » Version: 2.2.0

cpe:2.3:a:encode:django_rest_framework:2.2.0
Encode » Django Rest Framework » Version: 2.2.1

cpe:2.3:a:encode:django_rest_framework:2.2.1
Encode » Django Rest Framework » Version: 2.2.2

cpe:2.3:a:encode:django_rest_framework:2.2.2
Encode » Django Rest Framework » Version: 2.2.3

cpe:2.3:a:encode:django_rest_framework:2.2.3
Encode » Django Rest Framework » Version: 2.2.4

cpe:2.3:a:encode:django_rest_framework:2.2.4
Encode » Django Rest Framework » Version: 2.2.5

cpe:2.3:a:encode:django_rest_framework:2.2.5
Encode » Django Rest Framework » Version: 2.2.6

cpe:2.3:a:encode:django_rest_framework:2.2.6
Encode » Django Rest Framework » Version: 2.2.7

cpe:2.3:a:encode:django_rest_framework:2.2.7
Encode » Django Rest Framework » Version: 2.3.0

cpe:2.3:a:encode:django_rest_framework:2.3.0
Encode » Django Rest Framework » Version: 2.3.1

cpe:2.3:a:encode:django_rest_framework:2.3.1
Encode » Django Rest Framework » Version: 2.3.10

cpe:2.3:a:encode:django_rest_framework:2.3.10
Encode » Django Rest Framework » Version: 2.3.11

cpe:2.3:a:encode:django_rest_framework:2.3.11
Encode » Django Rest Framework » Version: 2.3.12

cpe:2.3:a:encode:django_rest_framework:2.3.12
Encode » Django Rest Framework » Version: 2.3.13

cpe:2.3:a:encode:django_rest_framework:2.3.13
Encode » Django Rest Framework » Version: 2.3.14

cpe:2.3:a:encode:django_rest_framework:2.3.14
Encode » Django Rest Framework » Version: 2.3.2

cpe:2.3:a:encode:django_rest_framework:2.3.2
Encode » Django Rest Framework » Version: 2.3.3

cpe:2.3:a:encode:django_rest_framework:2.3.3
Encode » Django Rest Framework » Version: 2.3.4

cpe:2.3:a:encode:django_rest_framework:2.3.4
Encode » Django Rest Framework » Version: 2.3.5

cpe:2.3:a:encode:django_rest_framework:2.3.5
Encode » Django Rest Framework » Version: 2.3.6

cpe:2.3:a:encode:django_rest_framework:2.3.6
Encode » Django Rest Framework » Version: 2.3.7

cpe:2.3:a:encode:django_rest_framework:2.3.7
Encode » Django Rest Framework » Version: 2.3.8

cpe:2.3:a:encode:django_rest_framework:2.3.8
Encode » Django Rest Framework » Version: 2.3.9

cpe:2.3:a:encode:django_rest_framework:2.3.9
Encode » Django Rest Framework » Version: 2.4.0

cpe:2.3:a:encode:django_rest_framework:2.4.0
Encode » Django Rest Framework » Version: 2.4.1

cpe:2.3:a:encode:django_rest_framework:2.4.1
Encode » Django Rest Framework » Version: 2.4.2

cpe:2.3:a:encode:django_rest_framework:2.4.2
Encode » Django Rest Framework » Version: 2.4.3

cpe:2.3:a:encode:django_rest_framework:2.4.3
Encode » Django Rest Framework » Version: 2.4.4

cpe:2.3:a:encode:django_rest_framework:2.4.4
Encode » Django Rest Framework » Version: 2.4.5

cpe:2.3:a:encode:django_rest_framework:2.4.5
Encode » Django Rest Framework » Version: 2.4.6

cpe:2.3:a:encode:django_rest_framework:2.4.6
Encode » Django Rest Framework » Version: 2.4.7

cpe:2.3:a:encode:django_rest_framework:2.4.7
Encode » Django Rest Framework » Version: 2.4.8

cpe:2.3:a:encode:django_rest_framework:2.4.8
Encode » Django Rest Framework » Version: 3.0.0

cpe:2.3:a:encode:django_rest_framework:3.0.0
Encode » Django Rest Framework » Version: 3.0.1

cpe:2.3:a:encode:django_rest_framework:3.0.1
Encode » Django Rest Framework » Version: 3.0.2

cpe:2.3:a:encode:django_rest_framework:3.0.2
Encode » Django Rest Framework » Version: 3.0.3

cpe:2.3:a:encode:django_rest_framework:3.0.3
Encode » Django Rest Framework » Version: 3.0.4

cpe:2.3:a:encode:django_rest_framework:3.0.4
Encode » Django Rest Framework » Version: 3.0.5

cpe:2.3:a:encode:django_rest_framework:3.0.5
Encode » Django Rest Framework » Version: 3.1.0

cpe:2.3:a:encode:django_rest_framework:3.1.0
Encode » Django Rest Framework » Version: 3.1.1

cpe:2.3:a:encode:django_rest_framework:3.1.1
Encode » Django Rest Framework » Version: 3.1.2

cpe:2.3:a:encode:django_rest_framework:3.1.2
Encode » Django Rest Framework » Version: 3.1.3

cpe:2.3:a:encode:django_rest_framework:3.1.3
Encode » Django Rest Framework » Version: 3.10.0

cpe:2.3:a:encode:django_rest_framework:3.10.0
Encode » Django Rest Framework » Version: 3.10.1

cpe:2.3:a:encode:django_rest_framework:3.10.1
Encode » Django Rest Framework » Version: 3.10.2

cpe:2.3:a:encode:django_rest_framework:3.10.2
Encode » Django Rest Framework » Version: 3.10.3

cpe:2.3:a:encode:django_rest_framework:3.10.3
Encode » Django Rest Framework » Version: 3.11.0

cpe:2.3:a:encode:django_rest_framework:3.11.0
Encode » Django Rest Framework » Version: 3.11.1

cpe:2.3:a:encode:django_rest_framework:3.11.1
Encode » Django Rest Framework » Version: 3.11.2

cpe:2.3:a:encode:django_rest_framework:3.11.2
Encode » Django Rest Framework » Version: 3.2.0

cpe:2.3:a:encode:django_rest_framework:3.2.0
Encode » Django Rest Framework » Version: 3.2.1

cpe:2.3:a:encode:django_rest_framework:3.2.1
Encode » Django Rest Framework » Version: 3.2.2

cpe:2.3:a:encode:django_rest_framework:3.2.2
Encode » Django Rest Framework » Version: 3.2.3

cpe:2.3:a:encode:django_rest_framework:3.2.3
Encode » Django Rest Framework » Version: 3.2.4

cpe:2.3:a:encode:django_rest_framework:3.2.4
Encode » Django Rest Framework » Version: 3.2.5

cpe:2.3:a:encode:django_rest_framework:3.2.5
Encode » Django Rest Framework » Version: 3.3.0

cpe:2.3:a:encode:django_rest_framework:3.3.0
Encode » Django Rest Framework » Version: 3.3.1

cpe:2.3:a:encode:django_rest_framework:3.3.1
Encode » Django Rest Framework » Version: 3.3.2

cpe:2.3:a:encode:django_rest_framework:3.3.2
Encode » Django Rest Framework » Version: 3.3.3

cpe:2.3:a:encode:django_rest_framework:3.3.3
Encode » Django Rest Framework » Version: 3.4.0

cpe:2.3:a:encode:django_rest_framework:3.4.0
Encode » Django Rest Framework » Version: 3.4.1

cpe:2.3:a:encode:django_rest_framework:3.4.1
Encode » Django Rest Framework » Version: 3.4.2

cpe:2.3:a:encode:django_rest_framework:3.4.2
Encode » Django Rest Framework » Version: 3.4.3

cpe:2.3:a:encode:django_rest_framework:3.4.3
Encode » Django Rest Framework » Version: 3.4.4

cpe:2.3:a:encode:django_rest_framework:3.4.4
Encode » Django Rest Framework » Version: 3.4.5

cpe:2.3:a:encode:django_rest_framework:3.4.5
Encode » Django Rest Framework » Version: 3.4.6

cpe:2.3:a:encode:django_rest_framework:3.4.6
Encode » Django Rest Framework » Version: 3.4.7

cpe:2.3:a:encode:django_rest_framework:3.4.7
Encode » Django Rest Framework » Version: 3.5.0

cpe:2.3:a:encode:django_rest_framework:3.5.0
Encode » Django Rest Framework » Version: 3.5.1

cpe:2.3:a:encode:django_rest_framework:3.5.1
Encode » Django Rest Framework » Version: 3.5.2

cpe:2.3:a:encode:django_rest_framework:3.5.2
Encode » Django Rest Framework » Version: 3.5.3

cpe:2.3:a:encode:django_rest_framework:3.5.3
Encode » Django Rest Framework » Version: 3.5.4

cpe:2.3:a:encode:django_rest_framework:3.5.4
Encode » Django Rest Framework » Version: 3.6.0

cpe:2.3:a:encode:django_rest_framework:3.6.0
Encode » Django Rest Framework » Version: 3.6.1

cpe:2.3:a:encode:django_rest_framework:3.6.1
Encode » Django Rest Framework » Version: 3.6.2

cpe:2.3:a:encode:django_rest_framework:3.6.2
Encode » Django Rest Framework » Version: 3.6.3

cpe:2.3:a:encode:django_rest_framework:3.6.3
Encode » Django Rest Framework » Version: 3.6.4

cpe:2.3:a:encode:django_rest_framework:3.6.4
Encode » Django Rest Framework » Version: 3.7.0

cpe:2.3:a:encode:django_rest_framework:3.7.0
Encode » Django Rest Framework » Version: 3.7.1

cpe:2.3:a:encode:django_rest_framework:3.7.1
Encode » Django Rest Framework » Version: 3.7.2

cpe:2.3:a:encode:django_rest_framework:3.7.2
Encode » Django Rest Framework » Version: 3.7.3

cpe:2.3:a:encode:django_rest_framework:3.7.3
Encode » Django Rest Framework » Version: 3.7.4

cpe:2.3:a:encode:django_rest_framework:3.7.4
Encode » Django Rest Framework » Version: 3.7.5

cpe:2.3:a:encode:django_rest_framework:3.7.5
Encode » Django Rest Framework » Version: 3.7.6

cpe:2.3:a:encode:django_rest_framework:3.7.6
Encode » Django Rest Framework » Version: 3.7.7

cpe:2.3:a:encode:django_rest_framework:3.7.7
Encode » Django Rest Framework » Version: 3.8.0

cpe:2.3:a:encode:django_rest_framework:3.8.0
Encode » Django Rest Framework » Version: 3.8.1

cpe:2.3:a:encode:django_rest_framework:3.8.1
Encode » Django Rest Framework » Version: 3.8.2

cpe:2.3:a:encode:django_rest_framework:3.8.2
Encode » Django Rest Framework » Version: 3.9.0

cpe:2.3:a:encode:django_rest_framework:3.9.0
Encode » Django Rest Framework » Version: 3.9.1

cpe:2.3:a:encode:django_rest_framework:3.9.1
Encode » Django Rest Framework » Version: 3.9.2

cpe:2.3:a:encode:django_rest_framework:3.9.2
Encode » Django Rest Framework » Version: 3.9.3

cpe:2.3:a:encode:django_rest_framework:3.9.3
Encode » Django Rest Framework » Version: 3.9.4

cpe:2.3:a:encode:django_rest_framework:3.9.4
Redhat » Ceph Storage » Version: 2.0

cpe:2.3:a:redhat:ceph_storage:2.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25626

Products

Pricing

Contact Us