Lucene search
GoogleOSV:BIT-DJANGO-2024-41990HistoryAug 08, 2024 - 7:17 a.m.
BIT-django-2024-41990
2024-08-0807:17:28
Google
osv.dev
6
django
denial-of-service
vulnerability
large inputs
attack
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
21.9%
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
Related
debiancve
debiancve
CVE-2024-41990
2024-08-07 15:15:56
github
github
Django vulnerable to a denial-of-service attack
2024-08-07 15:30:42
nvd
nvd
CVE-2024-41990
2024-08-07 15:15:56
ubuntucve
ubuntucve
CVE-2024-41990
2024-08-06 00:00:00
vulnrichment
vulnrichment
CVE-2024-41990
2024-08-07 00:00:00
redhatcve
redhatcve
CVE-2024-41990
2024-08-07 16:17:24
osv
osv
Security update for python-Django
2024-08-09 07:18:39
PYSEC-2024-68
2024-08-07 15:15:00
Django vulnerable to a denial-of-service attack
2024-08-07 15:30:42
veracode
veracode
Denial Of Service (DoS)
2024-08-08 09:15:46
cvelist
cvelist
CVE-2024-41990
2024-08-07 00:00:00
nessus
nessus
cve
cve
CVE-2024-41990
2024-08-07 15:15:56
openvas
openvas
Django 4.x < 4.2.15, 5.x < 5.0.8 Multiple Vulnerabilities - Windows
2024-08-07 00:00:00
Django 4.x < 4.2.15, 5.x < 5.0.8 Multiple Vulnerabilities - Linux
2024-08-07 00:00:00
Ubuntu: Security Advisory (USN-6946-1)
2024-08-07 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2024-08-06 00:00:00
freebsd
freebsd
Django -- multiple vulnerabilities
2024-08-01 00:00:00
redhat
redhat
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
21.9%
Related for OSV:BIT-DJANGO-2024-41990