Denial of Service Vulnerability in Django

CVE-2022-41323

What is CVE-2022-41323?

The vulnerability in Django allows an attacker to exploit internationalized URLs through the locale parameter, which is processed as a regular expression. This may lead to a denial of service condition, affecting the availability of the application. The issue is present in Django versions 3.2 prior to 3.2.16, 4.0 prior to 4.0.8, and 4.1 prior to 4.1.2, allowing unauthorized requests to overwhelm server resources and disrupt user access.

References