Denial-of-Service Vulnerability in Django by Django Software Foundation
CVE-2024-41991

7.5HIGH

Key Information:

Vendor

Djangoproject

Status
Django
Vendor
CVE Published:
7 August 2024

What is CVE-2024-41991?

A vulnerability affecting Django versions 5.0 prior to 5.0.8 and 4.2 prior to 4.2.15 allows for potential denial-of-service attacks. The issue arises from the urlize and urlizetrunc template filters, along with the AdminURLFieldWidget widget, which can be manipulated through specific inputs containing a significantly large quantity of Unicode characters. This vulnerability poses risks to applications utilizing these components, making it essential for users to promptly update to the latest secure versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://docs.djangoproject.com/en/dev/releases/security/
https://groups.google.com/forum/#%21forum/django-announce
https://www.djangoproject.com/weblog/2024/aug/06/security...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.