IPv6 Validation Vulnerability in Django Framework
CVE-2024-56374
5.8MEDIUM
What is CVE-2024-56374?
A vulnerability has been identified in prior versions of the Django framework that lacks proper upper-bound limit enforcement during IPv6 validation. This oversight affects functions like 'clean_ipv6_address' and 'is_valid_ipv6_address', as well as the 'GenericIPAddressField' form field. Exploitation of this issue could potentially allow an attacker to initiate a denial-of-service attack, impacting the availability of the application.
Affected Version(s)
Django 4.2 < 4.2.18
Django 5.0 < 5.0.11
Django 5.1 < 5.1.5