Search results

Cross-Site-Scripting (XSS): Detected data rendered directly to the end user via 'HttpResponse' or a similar object

MEDIUM

security

Status: Open.

#70 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Insecure Deserialization : Avoid using <code>pickle</code>, which is known to lead to code execution vulnerabilities

MEDIUM

security

Status: Open.

#69 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Insecure Deserialization : Avoid using <code>pickle</code>, which is known to lead to code execution vulnerabilities

MEDIUM

security

Status: Open.

#68 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

MEDIUM

security

Status: Open.

#67 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

MEDIUM

security

Status: Open.

#66 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

MEDIUM

security

Status: Open.

#65 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

MEDIUM

security

Status: Open.

#64 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

MEDIUM

security

Status: Open.

#63 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

MEDIUM

security

Status: Open.

#62 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Cross-Site-Scripting (XSS): Detected a template variable used in a script tag

MEDIUM

security

Status: Open.

#61 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

MEDIUM

security

Status: Open.

#60 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023

Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

MEDIUM

security

Status: Open.

#59 In sd-demo-vuln-org/PyDemoApp2;

· safedep-labs opened on Nov 15, 2023