python-django: Potential denial-of-service vulnerability in internationalized URLs
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Satellite 6.13 for RHEL 8 | |||
| python-django-0:3.2.18-1.el8pc | cpe:/a:redhat:satellite:6.13::el8 | RHSA-2023:2097 | 2023-05-03T00:00:00Z |
| python-django-0:3.2.18-1.el8pc | cpe:/a:redhat:satellite_capsule:6.13::el8 | RHSA-2023:2097 | 2023-05-03T00:00:00Z |
| RHUI 4 for RHEL 8 | |||
| python-django-0:3.2.16-1.0.1.el8ui | cpe:/a:redhat:rhui:4::el8 | RHSA-2023:0742 | 2023-02-13T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-5254-1 | python-django security update |
EUVD |
EUVD-2022-0094 | In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression. |
Github GHSA |
GHSA-qrw5-5h28-6cmg | Django denial-of-service vulnerability in internationalized URLs |
Ubuntu USN |
USN-5653-1 | Django vulnerability |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 3.8% (3.751% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-1333 | |
| Metrics |
ssvc
|