CVE-2022-22818 PUBLISHED

The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.

EPSS 0.60% · 69.3th percentile

Risk Scores

EPSS Score
0.60%
69.3th percentile

Affected Products

VendorProductVersions
Bitnamidjango4.0.0, 4.0.0, 2.2.0
Bitnamidjango3.2.0, 4.0.0, 2.2.0

Timeline

References

Open in Interactive Console →