Lucene search
+L

7629 matches found

OSV
OSV
added 2023/07/03 1:15 p.m.6 views

DEBIAN-CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS7.5AI score0.02978EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/03 1:15 p.m.9 views

PYSEC-2023-100

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS5.9AI score0.02978EPSS
SaveExploits0References5
PyPA
PyPA
added 2023/07/03 1:15 p.m.9 views

PYSEC-2023-100

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS6.8AI score0.02978EPSS
SaveExploits0References5Affected Software1
Prion
Prion
added 2023/07/03 1:15 p.m.28 views

Code injection

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

5CVSS7.2AI score0.02978EPSS
SaveExploits0References7Affected Software3
Vulnrichment
Vulnrichment
added 2023/07/03 12:00 a.m.32 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

6.6AI score0.02978EPSS
SaveExploits0References8
CVE
CVE
added 2023/07/03 12:00 a.m.336 views

CVE-2023-36053

CVE-2023-36053 affects Django’s EmailValidator and URLValidator due to a ReDoS flaw in the regular expression used for domain name labels. Affects Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3. The impact is a potential denial of service with availability compromise, as attacker...

7.5CVSS7.1AI score0.02978EPSS
SaveExploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/07/03 12:00 a.m.29 views

FreeBSD : Django -- multiple vulnerabilities (4ee7fa77-19a6-11ee-8a05-080027eda32c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4ee7fa77-19a6-11ee-8a05-080027eda32c advisory. - In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator a...

7.5CVSS7.5AI score0.02978EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/07/03 12:00 a.m.67 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.6AI score0.02978EPSS
SaveExploits0References8
OSV
OSV
added 2023/07/03 12:00 a.m.28 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS7AI score
SaveExploits0References11
CNNVD
CNNVD
added 2023/07/03 12:00 a.m.33 views

Django 安全漏洞

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper , view system , template system and so on. A security vulnerability exists in Django versions prior to 3.2.20, 4.1.10, and 4.2.3, which...

7.5CVSS7.3AI score0.02978EPSS
SaveExploits0References14
Debian CVE
Debian CVE
added 2023/07/03 12:00 a.m.103 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS7.6AI score0.02978EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2023/07/01 12:00 a.m.27 views

Django -- multiple vulnerabilities

Django reports: CVE-2023-36053: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator...

7.5CVSS6.9AI score0.02978EPSS
SaveExploits0References1
Redos
Redos
added 2023/06/22 12:00 a.m.37 views

ROS-20230621-01

A vulnerability in the Django web application framework is related to the fact that the application does not perform file validation when using a single form field to upload multiple files. files when using a single form field to upload multiple files. Exploiting the vulnerability could allow an...

9.8CVSS9.1AI score0.01391EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/20 8:52 a.m.74 views

Security Bulletin: IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities

Summary IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2023-31047 DESCRIPTION: Django could allow a remote attacker to bypass security restrictions. By sending a specially-crafted request, an attacker...

9.8CVSS9.1AI score0.81039EPSS
SaveExploits12Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/20 12:00 a.m.11 views

PT-2023-4169

Name of the Vulnerable Software and Affected Versions Django versions 3.2 through 3.2.19 Django versions 4 through 4.1.9 Django versions 4.2 through 4.2.2 Description The issue is related to the EmailValidator and URLValidator components in the Django web application platform. It involves the use...

8.7CVSS6.7AI score0.02978EPSS
SaveExploits0References173
OpenVAS
OpenVAS
added 2023/06/16 12:00 a.m.20 views

Fedora: Security Advisory for python-django-filter (FEDORA-2023-4dee6d0a76)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.01797EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/06/15 1:27 a.m.41 views

[SECURITY] Fedora 38 Update: python-django-filter-23.2-1.fc38

Django-filter is a reusable Django application for allowing users to filter querysets dynamically...

7.5CVSS6.9AI score0.01797EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/06/15 12:00 a.m.27 views

Fedora 38 : python-django-filter (2023-4dee6d0a76)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4dee6d0a76 advisory. New upstream version Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for th...

7.5CVSS6.8AI score0.01797EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/26 9:15 p.m.59 views

CVE-2023-33185

Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...

5.4CVSS4.9AI score0.00233EPSS
SaveExploits1References3
Prion
Prion
added 2023/05/26 9:15 p.m.27 views

Code injection

Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...

5.5CVSS5.4AI score0.00233EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder