Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:BIT-DJANGO-2024-41989
HistoryAug 08, 2024 - 7:17 a.m.

BIT-django-2024-41989

2024-08-0807:17:45
Google
osv.dev
4
django
issue
memory consumption
floatformat
template filter
scientific notation.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.9%

JSON

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.

Related

ubuntucve 1
cvelist 1
veracode 1
osv 9
redhatcve 1
nvd 1
debiancve 1
vulnrichment 1
cve 1
github 1
ubuntu 1
nessus 5
openvas 3
freebsd 1
redhat 1
ubuntucve
ubuntucve
CVE-2024-41989
2024-08-06 00:00:00
cvelist
cvelist
CVE-2024-41989
2024-08-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2024-08-08 10:31:26
osv
osv
Django memory consumption vulnerability
2024-08-07 15:30:42
PYSEC-2024-67
2024-08-07 15:15:00
CVE-2024-41989
2024-08-07 15:15:56
redhatcve
redhatcve
CVE-2024-41989
2024-08-08 08:17:27
nvd
nvd
CVE-2024-41989
2024-08-07 15:15:56
debiancve
debiancve
CVE-2024-41989
2024-08-07 15:15:56
vulnrichment
vulnrichment
CVE-2024-41989
2024-08-07 00:00:00
cve
cve
CVE-2024-41989
2024-08-07 15:15:56
github
github
Django memory consumption vulnerability
2024-08-07 15:30:42
ubuntu
ubuntu
Django vulnerabilities
2024-08-06 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Django vulnerabilities (USN-6946-1)
2024-08-06 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2024:2816-1)
2024-08-08 00:00:00
FreeBSD : Django -- multiple vulnerabilities (94d441d2-5497-11ef-9d2f-080027836e8b)
2024-08-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6946-1)
2024-08-07 00:00:00
Django 4.x < 4.2.15, 5.x < 5.0.8 Multiple Vulnerabilities - Windows
2024-08-07 00:00:00
Django 4.x < 4.2.15, 5.x < 5.0.8 Multiple Vulnerabilities - Linux
2024-08-07 00:00:00
freebsd
freebsd
Django -- multiple vulnerabilities
2024-08-01 00:00:00
redhat
redhat
(RHSA-2024:6428) Moderate: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
2024-09-05 14:03:16

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.9%

JSON
Related for OSV:BIT-DJANGO-2024-41989
ubuntucve1cvelist1veracode1osv9redhatcve1nvd1debiancve1vulnrichment1cve1github1ubuntu1nessus5openvas3freebsd1redhat1