PT-2024-5930 · Django+7 · Django+7
Mprogrammer
·
Published
2024-08-24
·
Updated
2026-01-03
·
CVE-2024-45230
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Django versions 4.2 through 4.2.15
Django versions 5.0 through 5.0.8
Django versions 5.1 through 5.1.0
Description
The
urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters. This issue can be exploited by an attacker to cause a denial-of-service.Recommendations
Django versions 4.2 through 4.2.15: Update to version 4.2.16.
Django versions 5.0 through 5.0.8: Update to version 5.0.9.
Django versions 5.1 through 5.1.0: Update to version 5.1.1.
As a temporary workaround, consider disabling the
urlize() and urlizetrunc() functions until a patch is available.Fix
DoS
Resource Exhaustion
Buffer Overflow
Improper Resource Release
Generation of Error Message Containing Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Django
Linuxmint
Red Os
Suse
Ubuntu