Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Django跨站脚本攻击漏洞
Vulnerability Description
Django 是Python编程语言驱动的一个开源Web应用程序框架。 Django 1.1.4之前的1.1.x版本及1.2.5之前的1.2.x版本中存在跨站脚本攻击漏洞。远程攻击者可以借助与上传文件相关的文件名称注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A