Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-41990

Опубликовано: 07 авг. 2024
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
Версия от 4.2 (включая) до 4.2.15 (исключая)
cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
Версия от 5.0 (включая) до 5.0.8 (исключая)

EPSS

Процентиль: 61%
0.00424
Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-130

Связанные уязвимости

CVSS3: 7.5
ubuntu
11 месяцев назад

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

CVSS3: 7.5
redhat
11 месяцев назад

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

CVSS3: 7.5
debian
11 месяцев назад

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2. ...

suse-cvrf
10 месяцев назад

Security update for python-Django

CVSS3: 5.3
github
11 месяцев назад

Django vulnerable to a denial-of-service attack

EPSS

Процентиль: 61%
0.00424
Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-130