{"action":"Upgrade django to 0.91.2 or later.","affected":[{"fixed":"0.91.2","introduced":"0.91"},{"fixed":"0.95.3","introduced":"0.95"},{"fixed":"0.96.2","introduced":"0.96"}],"component":"django","cve_ids":["CVE-2008-2302"],"ecosystem":"PyPI","epss":0.01323,"exploited":false,"fixed_versions":["0.91.2","0.95.3","0.96.2"],"ghsa_id":"GHSA-54qj-48vx-cr9f","id":"tcs_01M5KEZYE0WWNYKJNHXNHG2RF7","modified_at":"2024-09-16T21:53:19Z","published_at":"2022-05-01T23:48:43Z","references":["https://osv.dev/vulnerability/GHSA-54qj-48vx-cr9f","https://nvd.nist.gov/vuln/detail/CVE-2008-2302","https://github.com/django/django/commit/50ce7fb57d79e8940ccf6e2781f2f01df029b5c5","https://github.com/django/django/commit/6e657e2c404a96e744748209e896d8a69c15fdf2","https://github.com/django/django/commit/7791e5c050cebf86d868c5dab7092185b125fdc9","https://exchange.xforce.ibmcloud.com/vulnerabilities/42396","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2008-1.yaml","https://web.archive.org/web/20080725022008/http://secunia.com/advisories/30291","https://web.archive.org/web/20081012011038/http://secunia.com/advisories/30250","https://web.archive.org/web/20170222015451/http://securitytracker.com/id?1020028","https://web.archive.org/web/20200228153339/http://www.securityfocus.com/bid/29209","http://www.djangoproject.com/weblog/2008/may/14/security"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-54qj-48vx-cr9f","url":"https://osv.dev/vulnerability/GHSA-54qj-48vx-cr9f"}],"summary":"Django Cross-site scripting (XSS) vulnerability"}