Django -- multiple vulnerabilities

2023-02-0100:00:00

vuxml.freebsd.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.5%

JSON

Django reports:

CVE-2023-23969: Potential denial-of-service via Accept-Language headers.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpy37-django32< 3.2.17UNKNOWN
FreeBSDanynoarchpy38-django32< 3.2.17UNKNOWN
FreeBSDanynoarchpy39-django32< 3.2.17UNKNOWN
FreeBSDanynoarchpy310-django32< 3.2.17UNKNOWN
FreeBSDanynoarchpy38-django40< 4.0.9UNKNOWN
FreeBSDanynoarchpy39-django40< 4.0.9UNKNOWN
FreeBSDanynoarchpy310-django40< 4.0.9UNKNOWN
FreeBSDanynoarchpy38-django41< 4.1.6UNKNOWN
FreeBSDanynoarchpy39-django41< 4.1.6UNKNOWN
FreeBSDanynoarchpy310-django41< 4.1.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	py37-django32	< 3.2.17	UNKNOWN
FreeBSD	any	noarch	py38-django32	< 3.2.17	UNKNOWN
FreeBSD	any	noarch	py39-django32	< 3.2.17	UNKNOWN
FreeBSD	any	noarch	py310-django32	< 3.2.17	UNKNOWN
FreeBSD	any	noarch	py38-django40	< 4.0.9	UNKNOWN
FreeBSD	any	noarch	py39-django40	< 4.0.9	UNKNOWN
FreeBSD	any	noarch	py310-django40	< 4.0.9	UNKNOWN
FreeBSD	any	noarch	py38-django41	< 4.1.6	UNKNOWN
FreeBSD	any	noarch	py39-django41	< 4.1.6	UNKNOWN
FreeBSD	any	noarch	py310-django41	< 4.1.6	UNKNOWN