REDHAT-BUG-2295935: Medium severity Django Django vulnerability
Published Jul 5, 2024
·Updated
django.utils.html.urlize() was subject to a potential denial-of-service attack via certain inputs with a very large number of brackets.
Affected versions =================
Django main development branch Django 5.1 Django 5.0 Django 4.2
Affected Software
3 affected components
Django Django<=5.1
Django Django>=4.2<=5.0
Django Django=5.0
Event History
Jul 5, 2024
Data Sourced
via Red Hat·09:58 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2295935?
The vulnerability in REDHAT-BUG-2295935 poses a potential denial-of-service risk due to excessive bracket handling in Django.
2
How do I fix REDHAT-BUG-2295935?
To mitigate the vulnerability REDHAT-BUG-2295935, upgrade to Django versions 5.1 or later.
3
Which versions are affected by REDHAT-BUG-2295935?
Affected versions in REDHAT-BUG-2295935 include Django 4.2, 5.0, and 5.1.
4
What type of attack does REDHAT-BUG-2295935 expose Django to?
REDHAT-BUG-2295935 exposes Django to potential denial-of-service attacks through specially crafted inputs.
5
Is there a known exploit for REDHAT-BUG-2295935?
As of now, there are no publicly known exploits specifically targeting REDHAT-BUG-2295935.