Lucene search

K
osvGoogleOSV:USN-6674-2
HistoryMar 04, 2024 - 4:14 p.m.

python-django vulnerability

2024-03-0416:14:41
Google
osv.dev
5
usn-6674-1
seokchan yoon
truncator function
html input
denial of service
django
ubuntu 18.04 lts

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

USN-6674-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 18.04 LTS.

Original advisory details:

Seokchan Yoon discovered that the Django Truncator function incorrectly
handled very long HTML input. A remote attacker could possibly use this
issue to cause Django to consume resources, leading to a denial of service.