Описание
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 3:4.2.18-1ubuntu1 |
| esm-infra-legacy/trusty | needs-triage | |
| esm-infra-legacy/xenial | needs-triage | |
| esm-infra/bionic | released | 1:1.11.11-1ubuntu1.21+esm10 |
| esm-infra/focal | released | 2:2.2.12-1ubuntu0.28 |
| esm-infra/xenial | ignored | end of ESM support, was needs-triage |
| focal | released | 2:2.2.12-1ubuntu0.28 |
| jammy | released | 2:3.2.12-2ubuntu1.17 |
| noble | released | 3:4.2.11-1ubuntu1.6 |
| oracular | released | 3:4.2.15-1ubuntu1.3 |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, ...
Django Vulnerable to Allocation of Resources Without Limits or Throttling
EPSS
7.5 High
CVSS3