Django -- multiple vulnerabilities

2022-09-2300:00:00

vuxml.freebsd.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

70.0%

JSON

Django reports:

CVE-2022-41323: Potential denial-of-service vulnerability in
internationalized URLs.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpy37-django32< 3.2.16UNKNOWN
FreeBSDanynoarchpy38-django32< 3.2.16UNKNOWN
FreeBSDanynoarchpy39-django32< 3.2.16UNKNOWN
FreeBSDanynoarchpy310-django32< 3.2.16UNKNOWN
FreeBSDanynoarchpy38-django40< 4.0.8UNKNOWN
FreeBSDanynoarchpy39-django40< 4.0.8UNKNOWN
FreeBSDanynoarchpy310-django40< 4.0.8UNKNOWN
FreeBSDanynoarchpy38-django41< 4.1.2UNKNOWN
FreeBSDanynoarchpy39-django41< 4.1.2UNKNOWN
FreeBSDanynoarchpy310-django41< 4.1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	py37-django32	< 3.2.16	UNKNOWN
FreeBSD	any	noarch	py38-django32	< 3.2.16	UNKNOWN
FreeBSD	any	noarch	py39-django32	< 3.2.16	UNKNOWN
FreeBSD	any	noarch	py310-django32	< 3.2.16	UNKNOWN
FreeBSD	any	noarch	py38-django40	< 4.0.8	UNKNOWN
FreeBSD	any	noarch	py39-django40	< 4.0.8	UNKNOWN
FreeBSD	any	noarch	py310-django40	< 4.0.8	UNKNOWN
FreeBSD	any	noarch	py38-django41	< 4.1.2	UNKNOWN
FreeBSD	any	noarch	py39-django41	< 4.1.2	UNKNOWN
FreeBSD	any	noarch	py310-django41	< 4.1.2	UNKNOWN