Denial of Service Potential in Django Framework by The Django Software Foundation

CVE-2023-41164

What is CVE-2023-41164?

In specific versions of the Django framework, the function django.utils.encoding.uri_to_iri() is vulnerable to Denial of Service attacks. Attackers can exploit this vulnerability by supplying inputs that consist of an excessive number of Unicode characters, which may result in service interruptions. This issue affects versions 3.2 through 3.2.21, 4.1 through 4.1.11, and 4.2 through 4.2.5. Users are advised to update to the latest version to mitigate this risk.

References