Design/Logic Flaw

2013-05-0214:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.4%

JSON

The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.

CPENameOperatorVersion
ubuntu_linuxeq11.10
ubuntu_linuxeq12.10
ubuntu_linuxeq12.4 lts
ubuntu_linuxeq10.4 lts
djangoeq1.3.1
djangoeq1.3
djangoeq1.3.2
djangoeq1.3 beta1
djangoeq1.3 alpha1
djangoeq1.3.3

Name	Operator	Version
ubuntu_linux	eq	11.10
ubuntu_linux	eq	12.10
ubuntu_linux	eq	12.4 lts
ubuntu_linux	eq	10.4 lts
django	eq	1.3.1
django	eq	1.3
django	eq	1.3.2
django	eq	1.3 beta1
django	eq	1.3 alpha1
django	eq	1.3.3