Lucene search
GoogleOSV:PYSEC-2023-100HistoryJul 03, 2023 - 1:15 p.m.
PYSEC-2023-100
2023-07-0313:15:00
Google
osv.dev
63
django
redos
emailvalidator
urlvalidator
security vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
50.6%
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.
Related
osv
osv
python-django vulnerability
2023-07-25 11:33:05
Django has regular expression denial of service vulnerability in EmailValidator/URLValidator
2023-07-03 15:30:45
python-django vulnerability
2023-07-05 11:23:04
openvas
openvas
Ubuntu: Security Advisory (USN-6203-1)
2023-07-06 00:00:00
Ubuntu: Security Advisory (USN-6203-2)
2023-07-26 00:00:00
Debian: Security Advisory (DLA-3500-1)
2023-07-20 00:00:00
ubuntu
ubuntu
Django vulnerability
2023-07-25 00:00:00
Django vulnerability
2023-07-05 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-07-06 08:46:07
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Django vulnerability (USN-6203-1)
2023-07-05 00:00:00
openSUSE 15 Security Update : python-Django1 (openSUSE-SU-2023:0177-1)
2023-07-13 00:00:00
openSUSE 15 Security Update : python-Django1 (openSUSE-SU-2023:0176-1)
2023-07-13 00:00:00
redos
redos
ROS-20230911-10
2023-09-11 00:00:00
mageia
mageia
Updated python-django package fixes security vulnerability
2023-11-30 01:29:41
vulnrichment
vulnrichment
CVE-2023-36053
2023-07-03 00:00:00
nvd
nvd
CVE-2023-36053
2023-07-03 13:15:09
freebsd
freebsd
Django -- multiple vulnerabilities
2023-07-01 00:00:00
github
github
ubuntucve
ubuntucve
CVE-2023-36053
2023-07-04 00:00:00
cve
cve
CVE-2023-36053
2023-07-03 13:15:09
debiancve
debiancve
CVE-2023-36053
2023-07-03 13:15:09
cvelist
cvelist
CVE-2023-36053
2023-07-03 00:00:00
redhatcve
redhatcve
CVE-2023-36053
2023-08-07 19:19:15
redhat
redhat
prion
prion
Code injection
2023-07-03 13:15:00
debian
debian
[SECURITY] [DLA 3500-1] python-django security update
2023-07-19 11:32:15
[SECURITY] [DSA 5465-1] python-django security update
2023-08-03 20:45:41
fedora
fedora
[SECURITY] Fedora 37 Update: python-asgiref-3.5.2-1.fc37
2023-10-23 01:25:12
[SECURITY] Fedora 38 Update: python-asgiref-3.5.2-1.fc38
2023-10-15 01:44:29
[SECURITY] Fedora 37 Update: python-django-4.1.12-1.fc37
2023-10-23 01:25:13
ibm
ibm
rocky
rocky
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
50.6%
Related for OSV:PYSEC-2023-100