Lucene search
K

113 matches found

OSV
OSV
added 2024/10/18 11:9 a.m.1 views

OESA-2024-2279 python-django security update

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential...

7.5CVSS7.1AI score0.02254EPSS
Exploits0References3
OSV
OSV
added 2024/10/18 11:9 a.m.3 views

OESA-2024-2281 python-django security update

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential...

7.5CVSS7.1AI score0.02254EPSS
Exploits0References3
OSV
OSV
added 2024/10/18 11:9 a.m.2 views

OESA-2024-2282 python-django security update

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential...

7.5CVSS7.1AI score0.02254EPSS
Exploits0References3
Veracode
Veracode
added 2024/10/15 7:41 a.m.4 views

Denial Of Service (DoS)

django is vulnerable to Denial Of Service DoS. The vulnerability is due to the urlize and urlizetrunc template filters being susceptible to very large inputs containing a specific sequence of characters, allows an attacker to execute a denial-of-service attack...

7.5CVSS7.5AI score0.02254EPSS
Exploits0References10Affected Software1
RedHat Linux
RedHat Linux
added 2024/10/10 8:31 p.m.0 views

python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget

A flaw was found in Django. 'urlize', 'urlizetrunc', and 'AdminURLFieldWidget' may be subject to a denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS7AI score0.0091EPSS
Exploits0References5
OSV
OSV
added 2024/10/08 6:33 p.m.3 views

GHSA-5HGC-2VFP-MQVC Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

6.9CVSS6.4AI score0.02254EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2024/10/08 6:33 p.m.16 views

Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

7.5CVSS6.5AI score0.02254EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2024/10/08 4:15 p.m.1 views

DEBIAN-CVE-2024-45230

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

7.5CVSS6.5AI score0.02254EPSS
Exploits0References1
OSV
OSV
added 2024/10/08 4:15 p.m.1 views

PYSEC-2024-102

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

7.5CVSS6.4AI score0.02254EPSS
Exploits0References4
PyPA
PyPA
added 2024/10/08 4:15 p.m.5 views

PYSEC-2024-102

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

7.5CVSS6.9AI score0.02254EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/08 12:0 a.m.13 views

CVE-2024-45230

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

7.1AI score0.02254EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/10/08 12:0 a.m.15 views

CVE-2024-45230

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

0.02254EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.1 views

The vulnerability of the django.utils.html.urlize() function in the Django web application framework allows a attacker to trigger a denial-of-service attack.

The vulnerability of the django.utils.html.urlize function in the Django web application framework is related to inconsistencies in the parameters related to input data length. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

7.8CVSS6.5AI score0.00304EPSS
Exploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/16 12:0 a.m.1 views

The vulnerability of the django.utils.html.urlize() function in the Django web application framework allows a attacker to trigger a denial-of-service attack.

The vulnerability of the django.utils.html.urlize function in the Django web application framework is related to inconsistencies in the parameters related to input data length. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

7.8CVSS6.6AI score0.01222EPSS
Exploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/16 12:0 a.m.1 views

The vulnerability of the django.utils.html.urlize() function in the Django web application framework allows a attacker to trigger a denial-of-service attack.

The vulnerability of the django.utils.html.urlize function in the Django web application framework is related to inconsistencies in the parameters related to input data length. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

7.8CVSS6.8AI score0.0091EPSS
Exploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/06 12:0 a.m.1 views

The vulnerability of the django.utils.html.urlize function in the Django web application framework allows a attacker to trigger a denial-of-service attack.

The vulnerability of the django.utils.html.urlize function in the Django web application framework is related to improper resource cleanup or release. Exploiting this vulnerability can allow an attacker to cause service failures...

7.8CVSS6.3AI score0.02254EPSS
Exploits0References6Affected Software3
OSV
OSV
added 2024/09/05 10:49 p.m.11 views

OPENSUSE-SU-2024:0282-1 Security update for python-Django

This update for python-Django fixes the following issues: CVE-2024-45230: Fixed Potential denial-of-service vulnerability in django.utils.html.urlize boo1229823 CVE-2024-45231: Potential user email enumeration via response status on password reset boo1229824...

7.5CVSS5.9AI score0.02254EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/09/05 2:13 p.m.1 views

python-django: Potential denial-of-service in django.utils.html.urlize()

A vulnerability was found in the Django framework's urlize and urlizetrunc functions, where an attacker can input a certain string containing a large number of brackets, leads to a potential denial of service when the application attempts to process the excessive input...

7.5CVSS7AI score0.00304EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/09/05 2:13 p.m.1 views

python-django: Potential denial-of-service vulnerability in django.utils.html.urlize()

A flaw was found in Django. Processing very large inputs with a specific sequence of characters with the urlize and urlizetrunc functions can cause a denial of service...

7.5CVSS7.1AI score0.01222EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/09/05 2:13 p.m.3 views

python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget

A flaw was found in Django. 'urlize', 'urlizetrunc', and 'AdminURLFieldWidget' may be subject to a denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS7AI score0.0091EPSS
Exploits0References5
Rows per page
Query Builder