Поиск уязвимостей
Количество 18
Количество 18
ALT-PU-2023-1553
ALT-PU-2023-1553: package `python3-module-django` update to version 3.2.18-alt1
ALT-PU-2023-1510
ALT-PU-2023-1510: package `python3-module-django` update to version 3.2.18-alt1
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack.
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack.
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack.
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 ...
CVE-2023-23969
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.
CVE-2023-23969
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.
CVE-2023-23969
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.
CVE-2023-23969
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, t ...
openSUSE-SU-2023:0075-1
Security update for python-Django
openSUSE-SU-2023:0062-1
Security update for python-Django
GHSA-q2jf-h9jm-m7p4
Django contains Uncontrolled Resource Consumption via cached header
GHSA-2hrw-hx67-34x6
Resource exhaustion in Django
BDU:2023-09100
Уязвимость программной платформы для веб-приложений Django, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2023-00662
Уязвимость программной платформы для веб-приложений Django, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2023:0057-1
Security update for python-Django
SUSE-SU-2024:2545-1
Security update for python-Django
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
ALT-PU-2023-1553 ALT-PU-2023-1553: package `python3-module-django` update to version 3.2.18-alt1 | CVSS3: 7.5 | больше 3 лет назад | ||
ALT-PU-2023-1510 ALT-PU-2023-1510: package `python3-module-django` update to version 3.2.18-alt1 | CVSS3: 7.5 | больше 3 лет назад | ||
CVE-2023-24580 An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack. | CVSS3: 7.5 | 63% Средний | больше 3 лет назад | |
CVE-2023-24580 An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack. | CVSS3: 7.5 | 63% Средний | больше 3 лет назад | |
CVE-2023-24580 An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack. | CVSS3: 7.5 | 63% Средний | больше 3 лет назад | |
CVE-2023-24580 An issue was discovered in the Multipart Request Parser in Django 3.2 ... | CVSS3: 7.5 | 63% Средний | больше 3 лет назад | |
CVE-2023-23969 In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. | CVSS3: 7.5 | 47% Средний | почти 4 года назад | |
CVE-2023-23969 In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. | CVSS3: 7.5 | 47% Средний | почти 4 года назад | |
CVE-2023-23969 In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. | CVSS3: 7.5 | 47% Средний | почти 4 года назад | |
CVE-2023-23969 In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, t ... | CVSS3: 7.5 | 47% Средний | почти 4 года назад | |
openSUSE-SU-2023:0075-1 Security update for python-Django | 63% Средний | больше 3 лет назад | ||
openSUSE-SU-2023:0062-1 Security update for python-Django | 63% Средний | больше 3 лет назад | ||
GHSA-q2jf-h9jm-m7p4 Django contains Uncontrolled Resource Consumption via cached header | CVSS3: 7.5 | 47% Средний | почти 4 года назад | |
GHSA-2hrw-hx67-34x6 Resource exhaustion in Django | CVSS3: 7.5 | 63% Средний | больше 3 лет назад | |
BDU:2023-09100 Уязвимость программной платформы для веб-приложений Django, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 63% Средний | больше 3 лет назад | |
BDU:2023-00662 Уязвимость программной платформы для веб-приложений Django, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.7 | 47% Средний | почти 4 года назад | |
openSUSE-SU-2023:0057-1 Security update for python-Django | больше 3 лет назад | |||
SUSE-SU-2024:2545-1 Security update for python-Django | больше 2 лет назад |
Уязвимостей на страницу