CVE-2024-39317

creationtimestamp| type| source ---|---|--- 2024-07-11 19:09:43+00:00| seen| https://t.me/cvedetector/674...

CVE-2024-39317

Wagtail is an open source content management system built on Django. A bug in Wagtail's parsequerystring would result in it taking a long time to process suitably crafted inputs. When used to parse sufficiently long strings of characters without a space, parsequerystring would take an unexpectedl...

django-cast (=0.2.33), wagtail-liveedit (>=0.0.11 <=0.0.12) potentially affected by CVE-2024-39317 via wagtail (>=6.1.0 <=6.1.2)

wagtail PYPI version =6.1.0, =0.0.11, =0.0.12 Source cves: CVE-2024-39317 Source advisory: OSV:PYSEC-2024-86...

adede (=4.1.0), aimmo (>=0.57.1 <=1.3.1b671) +155 more potentially affected by CVE-2024-39317 via wagtail (>=2.0.2 <=5.1.3)

wagtail PYPI version =2.0.2, =0.57.1, =4.1.0, =4.3.0, =2.28.0, =0.5.0, =2.0.0, =0.1.29, =0.2.0, =2.0.3, =2.0.7 - draftail-helpers =4.1.0 - draftail-maths =4.1.0 and more Source cves: CVE-2024-39317 Source advisory: OSV:PYSEC-2024-86...

CVE-2024-39317

Wagtail (Django-based CMS) exposes a Regular Expression Denial of Service in the parse_query_string routine when handling long, space-free input strings. The issue can be exploited by any Wagtail admin user in initial installations; end users are not typically capable unless a custom search path ...

django-cast (=0.2.33), wagtail-liveedit (>=0.0.11 <=0.0.12) potentially affected by CVE-2024-39317 via wagtail (>=6.1.0 <=6.1.2)

wagtail PYPI version =6.1.0, =0.0.11, =0.0.12 Source cves: CVE-2024-39317 Source advisory: OSV:GHSA-JMP3-39VP-FWG8...