CVE-2019-3498

score

<0.1

cvss

6.5

epss

3.4%

published

2019-01-09

kev added

—

first seen

2026-10-21

Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5 contain an improper neutralization of special elements in output caused by django.views.defaults.page_not_found(), letting attackers perform content spoofing on 404 error pages, exploit requires crafting malicious URLs.