Denial-of-service in Django

🗓️ 12 Jan 2022 19:20:53Reported by GitHub Advisory DatabaseType

Issue in Django 2.2, 3.2, and 4.0 caused by UserAttributeSimilarityValidato

Reporter	Title	Published	Views	Family All 125
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.11-alt1	24 Jan 202200:00	–	altlinux
AlpineLinux	CVE-2021-45115	4 Jan 202223:16	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
CNNVD	Django 安全漏洞	4 Jan 202200:00	–	cnnvd
CNVD	Django Denial of Service Vulnerability (CNVD-2022-03215)	6 Jan 202200:00	–	cnvd
CVE	CVE-2021-45115	4 Jan 202223:16	–	cve
Cvelist	CVE-2021-45115	4 Jan 202223:16	–	cvelist
FreeBSD	Django -- multiple vulnerabilities	20 Dec 202100:00	–	freebsd
Debian	[SECURITY] [] python-django security update	4 Nov 202214:36	–	debian
Debian	[SECURITY] [] python-django security update	4 Nov 202214:35	–	debian

Vulners

Node

django_project djangoRange4.0a1–4.0.1pip

django_project djangoRange3.2a1–3.2.11pip

django_project djangoRange2.2a1–2.2.26pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-45115
groups	www.groups.google.com/forum/
github	www.github.com/django/django/commit/2135637fdd5ce994de110affef9e67dffdf77277
github	www.github.com/django/django/commit/a8b32fe13bcaed1c0b772fdc53de84abc224fb20
github	www.github.com/django/django/commit/df79ef03ac867c93caaa6be56bc69e66abfeef8f
docs	www.docs.djangoproject.com/en/4.0/releases/security
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV
security	www.security.netapp.com/advisory/ntap-20220121-0005
djangoproject	www.djangoproject.com/weblog/2022/jan/04/security-releases
github	www.github.com/advisories/GHSA-53qw-q765-4fww

20 Sep 2024 16:04Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5

EPSS0.00414