← Back

CVE-2024-45230

nvd nist
Published: Oct 8, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

Affected (3)

Djangoproject
1 product
Django
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Djangoproject
Django
From 4.2.0 to 4.2.16
Django
From 5.0 to 5.0.9
Django
Version 5.1

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (3)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Permissions Required
Source: cve@mitre.org
Vendor Advisory

Timeline

No history available yet.