2 matches found
GHSA-H5JV-4P7W-64JG Django Denial-of-service in strip_tags()
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to the behaviour of the underlying HTMLParser, django.utils.html.striptags would be extremely slow to evaluate certain inputs containing large sequences of nested incomplete HTML entities...
8.7CVSS6.8AI score0.03172EPSS
SaveExploits0References14
Django 'utils.html.strip_tags' function denial of service vulnerability
Django is Django Software Foundation of an open source Web application framework using the Python language . The framework includes an object-oriented mapper, view system, template system and so on. A security vulnerability exists in Django's 'utils.html.striptags' function. A remote attacker can...
5CVSS6.8AI score0.0496EPSS
SaveExploits0References1
20