CVE-2019-15486: XSS
Published Aug 23, 2019
·Updated
django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via jsreverseinline.
Affected Software
2 affected componentsFixes available
pip/django-js-reverse<0.9.1
0.9.1
Django Js Reverse Project Django Js Reserve<0.9.1
Remediation
Event History
Aug 23, 2019
CVE Published
via MITRE·12:31 PM
Data Sourced
via MITRE·12:31 PM
Description
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Aug 27, 2019
Advisory Published
via GitHub·05:39 PM
Frequently Asked Questions
1
What is the severity of CVE-2019-15486?
CVE-2019-15486 is classified as a medium severity vulnerability.
2
How do I fix CVE-2019-15486?
To fix CVE-2019-15486, upgrade django-js-reverse to version 0.9.1 or later.
3
What is the nature of CVE-2019-15486 vulnerability?
CVE-2019-15486 is an XSS vulnerability affecting versions of django-js-reverse prior to 0.9.1.
4
Which versions of django-js-reverse are affected by CVE-2019-15486?
Versions of django-js-reverse before 0.9.1 are affected by CVE-2019-15486.
5
What impact does CVE-2019-15486 have on applications?
CVE-2019-15486 can allow an attacker to execute arbitrary JavaScript in a user's browser context.