Lucene search
GoogleOSV:PYSEC-2024-28HistoryFeb 06, 2024 - 10:16 p.m.
PYSEC-2024-28
2024-02-0622:16:00
Google
osv.dev
116
django
intcomma
vulnerability
patched
software
denial-of-service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
34.7%
An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.
Related
nessus
nessus
RHEL 9 : Red Hat OpenStack Platform 17.1 (python-django) (RHSA-2024:2731)
2024-05-22 00:00:00
RHEL 7 : django (Unpatched Vulnerability)
2024-05-11 00:00:00
redos
redos
ROS-20240410-14
2024-04-10 00:00:00
openvas
openvas
Django < 3.2.24, 4.x < 4.2.10, 5.x < 5.0.2 DoS Vulnerability - Windows
2024-02-07 00:00:00
Ubuntu: Security Advisory (USN-6623-1)
2024-02-07 00:00:00
Django < 3.2.24, 4.x < 4.2.10, 5.x < 5.0.2 DoS Vulnerability - Linux
2024-02-07 00:00:00
osv
osv
python310-Django-4.2.10-1.1 on GA media
2024-06-15 00:00:00
CVE-2024-24680
2024-02-06 22:16:15
CGA-7wj7-9876-vw6h
2024-06-06 12:25:04
ubuntu
ubuntu
Django vulnerability
2024-02-06 00:00:00
cvelist
cvelist
CVE-2024-24680
2024-02-06 00:00:00
nvd
nvd
CVE-2024-24680
2024-02-06 22:16:15
wolfi
wolfi
CVE-2024-24680 vulnerabilities
2024-09-27 09:13:12
debiancve
debiancve
CVE-2024-24680
2024-02-06 22:16:15
freebsd
freebsd
Django -- multiple vulnerabilities
2024-01-09 00:00:00
redhat
redhat
(RHSA-2024:2731) Moderate: Red Hat OpenStack Platform 17.1 (python-django) security update
2024-05-22 20:29:37
(RHSA-2024:5662) Moderate: Satellite 6.15.3 Security Update
2024-08-20 20:20:15
ubuntucve
ubuntucve
CVE-2024-24680
2024-02-06 00:00:00
prion
prion
Design/Logic Flaw
2024-02-06 22:16:00
redhatcve
redhatcve
CVE-2024-24680
2024-02-07 21:02:04
cve
cve
CVE-2024-24680
2024-02-06 22:16:15
veracode
veracode
Denial Of Service (DoS)
2024-02-08 07:42:40
cgr
cgr
CVE-2024-24680 vulnerabilities
2024-05-19 03:07:16
github
github
Django denial-of-service attack in the intcomma template filter
2024-02-07 00:30:25
fedora
fedora
[SECURITY] Fedora 39 Update: python-django-4.2.11-2.fc39
2024-04-18 01:12:12
[SECURITY] Fedora 40 Update: python-django-4.2.11-2.fc40
2024-04-13 03:41:27
[SECURITY] Fedora 38 Update: python-django3-3.2.25-2.fc38
2024-04-20 02:14:46
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
34.7%
Related for OSV:PYSEC-2024-28