PT-2026-6035 · Django+3 · Django+3
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Django versions 6.0 through 6.0.1
Django versions 5.2 through 5.2.10
Django versions 4.2 through 4.2.27
Django versions 5.0.x and earlier
Django versions 4.1.x and earlier
Django versions 3.2.x and earlier
Description
The
django.utils.text.Truncator.chars() and Truncator.words() methods, when used with html=True, and the truncatechars html and truncatewords html template filters are susceptible to a potential denial-of-service. This occurs when processing crafted inputs containing a large number of unmatched HTML end tags.Recommendations
Update to Django version 6.0.2 or later.
Update to Django version 5.2.11 or later.
Update to Django version 4.2.28 or later.
Exploit
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Django
Linuxmint
Red Os
Ubuntu