Django Denial of Service Vulnerability (CNVD-2022-03215)

Django is the Django Foundation’s set of Python-based language open source Web application framework . The framework includes object-oriented mapper, view system, template system, etc. Django version 2.2 before 2.2.26, version 3.2 before 3.2.11, and version 4.0 before 4.0.1 has a denial-of-service vulnerability, which stems from the UserAttributesMilarityValidator in evaluating submitted passwords generates a significant resource consumption. An attacker could exploit this vulnerability to perform a denial-of-service attack.