Denial Of Service (DoS)

🗓️ 08 Aug 2024 08:16:22Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 16 Views

Django DoS vulnerability in urlize, urlizetrunc, and AdminURLFieldWidge

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin: Denial of service and SQL injection might affect IBM Storage Defender – Resiliency Service	23 Sep 202416:44	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service, directory traversal, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	15 Apr 202502:50	–	ibm
FreeBSD	Django -- multiple vulnerabilities	1 Aug 202400:00	–	freebsd
AlpineLinux	CVE-2024-41991	7 Aug 202400:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Python-Django	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the django.utils.html.urlize() function in the Django web application framework allows a attacker to trigger a denial-of-service attack.	16 Sep 202400:00	–	bdu_fstec
Circl	CVE-2024-41991	7 Aug 202417:48	–	circl
CNNVD	Django 安全漏洞	6 Aug 202400:00	–	cnnvd
CVE	CVE-2024-41991	7 Aug 202400:00	–	cve
Cvelist	CVE-2024-41991	7 Aug 202400:00	–	cvelist

Vulners

Node

py3-django py3-djangoMatch1.11.29-r0python

AND

py3-django py3-djangoMatch3.2.17-r0python

AND

py3-django py3-djangoMatch4.2-r0python

AND

py3-django py3-djangoMatch3.2.18-r1python

AND

py3-django py3-djangoMatch3.2.15-r0python

AND

py3-django py3-djangoMatch4.2.11-r0python

AND

py3-django py3-djangoMatch3.1.7-r1python

AND

py3-django py3-djangoMatch3.2.18-r0python

AND

py3-django py3-djangoMatch4.2.10-r0python

AND

py3-django py3-djangoMatch3.1.7-r0python

AND

py3-django py3-djangoMatch4.2.5-r0python

AND

py3-django py3-djangoMatch3.2.12-r0python

AND

py3-django py3-djangoMatch4.2.1-r0python

AND

py3-django py3-djangoMatch3.2.16-r0python

AND

py3-django py3-djangoMatch1.11.28-r0python

AND

py3-django py3-djangoMatch4.2.7-r0python

AND

py3-django py3-djangoMatch4.2-r1python

AND

py3-django py3-djangoMatch3.1.8-r0python

AND

py3-django py3-djangoMatch4.2.2-r0python

AND

py3-django py3-djangoMatch3.2.16-r1python

AND

py3-django py3-djangoMatch3.1.13-r1python

AND

py3-django py3-djangoMatch3.2.14-r0python

AND

py3-django py3-djangoMatch4.2.3-r0python

AND

py3-django py3-djangoMatch3.2.13-r0python

AND

py3-django py3-djangoMatch4.2.11-r1python

AND

py3-django py3-djangoMatch4.2.6-r0python

AND

py3-django py3-djangoMatch4.2.12-r0python

AND

py3-django py3-djangoMatch3.1.13-r0python

AND

alpinelinux alpine_linuxMatchedge

OR

py3-django py3-djangoMatch4.2.12-r0python

AND

alpinelinux alpine_linuxMatch3.20

OR

django_project djangoRange4.2a1–4.2.14python

OR

django_project djangoRange5.0–5.0.7python

Source	Link
docs	www.docs.djangoproject.com/en/dev/releases/security
djangoproject	www.djangoproject.com/weblog/2024/aug/06/security-releases
github	www.github.com/django/django/commit/523da8771bce321023f490f70d71a9e973ddc927
github	www.github.com/django/django/commit/efea1ef7e2190e3f77ca0651b5458297bc0f6a9f
groups	www.groups.google.com/forum/
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-69.yaml
github	www.github.com/advisories/GHSA-r836-hh6v-rg5g
docs	www.docs.djangoproject.com/en/dev/releases/security/
djangoproject	www.djangoproject.com/weblog/2024/aug/06/security-releases/

09 Aug 2024 21:25Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.0091

SSVC

django dos vulnerability unicode characters inputs validation malicious payloads