The vulnerability of the EmailValidator and URLValidator components of the Django web application software platform allows a hacker to trigger a service failure.

Django EmailValidator and URLValidator have a high complexity regex that can be exploited to cause failures.

Reporter	Title	Published	Views	Family All 167
FreeBSD	Django -- multiple vulnerabilities	1 Jul 202300:00	–	freebsd
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
Circl	CVE-2023-36053	3 Jul 202316:22	–	circl
CNNVD	Django 安全漏洞	3 Jul 202300:00	–	cnnvd
CVE	CVE-2023-36053	3 Jul 202300:00	–	cve
Cvelist	CVE-2023-36053	3 Jul 202300:00	–	cvelist
Debian	[SECURITY] [DLA 3500-1] python-django security update	19 Jul 202311:32	–	debian
Debian	[SECURITY] [DSA 5465-1] python-django security update	3 Aug 202320:45	–	debian
Debian CVE	CVE-2023-36053	3 Jul 202300:00	–	debiancve
Tenable Nessus	Debian dla-3500 : python-django - security update	19 Jul 202300:00	–	nessus

Vulners

Node

django djangoRange4.0–4.2.3

django djangoRange4.1–4.1.10

django djangoRange3.2–3.2.20

Source	Link
docs	www.docs.djangoproject.com/en/4.2/releases/security/
groups	www.groups.google.com/forum/
lists	www.lists.debian.org/debian-lts-announce/2023/07/msg00022.html
debian	www.debian.org/security/2023/dsa-5465
djangoproject	www.djangoproject.com/weblog/2023/jul/03/security-releases/
ubuntu	www.ubuntu.com/security/notices/USN-6203-1
openwall	www.openwall.com/lists/oss-security/2023/07/03/1
altsp	www.altsp.su/obnovleniya-bezopasnosti/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.9/
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0212SE17

11 Nov 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 37.5

CVSS 27.8

EPSS0.08919