Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

🗓️ 08 Oct 2024 18:33:13Reported by GitHub Advisory DatabaseType

Django vulnerability in urlize() and urlizetrunc() template filter

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.15-py3-none-any.whl CVE-2024-45231	12 Mar 202521:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.15-py3-none-any.whl CVE-2024-45230	17 Mar 202507:46	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service, directory traversal, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	15 Apr 202502:50	–	ibm
AlpineLinux	CVE-2024-45230	8 Oct 202400:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the django.utils.html.urlize function in the Django web application framework allows a attacker to trigger a denial-of-service attack.	6 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Django web application software, related to deficiencies in the error reporting mechanism, allows attackers to compromise the confidentiality of protected information.	5 Aug 202500:00	–	bdu_fstec
Circl	CVE-2024-45230	8 Oct 202418:43	–	circl
CNNVD	Django 安全漏洞	8 Oct 202400:00	–	cnnvd
CVE	CVE-2024-45230	8 Oct 202400:00	–	cve

Vulners

Node

django_project djangoRange4.2–4.2.16pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45230
docs	www.docs.djangoproject.com/en/dev/releases/security
groups	www.groups.google.com/forum/
djangoproject	www.djangoproject.com/weblog/2024/sep/03/security-releases
github	www.github.com/django/django/commit/022ab0a75c76ab2ea31dfcc5f2cf5501e378d397
github	www.github.com/django/django/commit/813de2672bd7361e9a453ab62cd6e52f96b6525b
github	www.github.com/django/django/commit/d147a8ebbdf28c17cafbbe2884f0bc57e2bf82e2
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-102.yaml
github	www.github.com/advisories/GHSA-5hgc-2vfp-mqvc

30 Oct 2024 19:03Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.02254

SSVC