Lucene search

PRIOn knowledge basePRION:CVE-2024-24680

HistoryFeb 06, 2024 - 10:16 p.m.

Design/Logic Flaw

2024-02-0622:16:00

PRIOn knowledge base

www.prio-n.com

django

template filter

denial-of-service attack

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.8%

JSON

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

CPENameOperatorVersion
djangoge5.0
djangolt5.0.2
djangoge3.2
djangolt3.2.24
djangoge4.2
djangolt4.2.10

Name	Operator	Version
django	ge	5.0
django	lt	5.0.2
django	ge	3.2
django	lt	3.2.24
django	ge	4.2
django	lt	4.2.10

References

docs.djangoproject.com/en/5.0/releases/security/

groups.google.com/forum/

www.djangoproject.com/weblog/2024/feb/06/security-releases/