Intel

AIKIDO-2024-10024

django-json-widget is vulnerable to Improper Input Validation

Improper Input Validation Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Apr 11, 2024

83

High Risk

This Affects:

pythondjango-json-widget
0.1.0 - 1.1.1
Fixed in 2.0.0
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to improper input validation due to failure in preventing HTML injection during JSON handling.

Who does this affect?

You are affected if you are using a version of this package = 1.1.1.

Background info

django-json-widget is vulnerable to Improper Input Validation in versions 0.1.0 - 1.1.1.

How to fix this

Upgrade the django-json-widget library to the patch version.