Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:48035
HistoryJul 11, 2024 - 9:01 a.m.

Denial Of Service (DoS)

2024-07-1109:01:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
django
input validation
vulnerability
dos
system unresponsive

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

Django is vulnerable to Denial of Service (DoS). The vulnerability is caused by insufficient input validation when handling very long strings containing specific characters in the django.utils.translation.get_supported_language_variant() function. This allows an attacker to exploit the function, potentially leading to a DoS condition where the system becomes unresponsive or slows down significantly.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High