CVE-2024-39614

2024-07-1000:00:00

mitre

github.com

django

denial-of-service

5.0

4.2

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*"
    ],
    "vendor": "djangoproject",
    "product": "django",
    "versions": [
      {
        "status": "unaffected",
        "version": "5.1"
      },
      {
        "status": "affected",
        "version": "5.0",
        "lessThan": "5.0.7",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.2",
        "lessThan": "4.2.14",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]