Описание
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 3:4.2.18-1ubuntu1 |
| esm-infra-legacy/trusty | needs-triage | |
| esm-infra/bionic | released | 1:1.11.11-1ubuntu1.21+esm10 |
| esm-infra/focal | not-affected | 2:2.2.12-1ubuntu0.28 |
| esm-infra/xenial | needs-triage | |
| focal | released | 2:2.2.12-1ubuntu0.28 |
| jammy | released | 2:3.2.12-2ubuntu1.17 |
| noble | released | 3:4.2.11-1ubuntu1.6 |
| oracular | released | 3:4.2.15-1ubuntu1.3 |
| plucky | released | 3:4.2.18-1ubuntu1 |
Показывать по
5 Medium
CVSS3
Связанные уязвимости
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, ...
Django vulnerable to Allocation of Resources Without Limits or Throttling
5 Medium
CVSS3