GHSA-qrw5-5h28-6cmgHighCVSS 7.5

Django denial-of-service vulnerability in internationalized URLs

Published
October 16, 2022
Last Modified
September 20, 2024

🔗 CVE IDs covered (1)

CVE-2022-41323 →

📋 Description

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.

🎯 Affected products3

  • pip/django:>= 3.2, < 3.2.16
  • pip/django:>= 4.0, < 4.0.8
  • pip/django:>= 4.1, < 4.1.2

🔗 References (15)