Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-G8XG-JGJ6-49R3
HistoryMay 05, 2022 - 2:48 a.m.

Django is vulnerable to Denial of Service attack in formset

2022-05-0502:48:45
CWE-400
GitHub Advisory Database
github.com
10
django
form library
denial of service
memory consumption

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.009

Percentile

82.9%

JSON

The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.

Affected configurations

Vulners
Node
django-registration_projectdjango-registrationRange<1.4.4django
OR
django-registration_projectdjango-registrationRange<1.3.6django

Related

osv 3
prion 1
nvd 1
cve 1
debiancve 1
gitlab 1
ubuntucve 1
cvelist 1
openvas 8
nessus 6
fedora 2
seebug 1
debian 1
securityvulns 2
redhat 1
freebsd 1
ubuntu 1
osv
osv
PYSEC-2013-17
2013-05-02 14:55:00
Django is vulnerable to Denial of Service attack in formset
2022-05-05 02:48:45
python-django - several vulnerabilities
2013-02-27 00:00:00
prion
prion
Design/Logic Flaw
2013-05-02 14:55:00
nvd
nvd
CVE-2013-0306
2013-05-02 14:55:05
cve
cve
CVE-2013-0306
2013-05-02 14:55:05
debiancve
debiancve
CVE-2013-0306
2013-05-02 14:55:05
gitlab
gitlab
Django is vulnerable to Denial of Service attack in formset
2022-05-05 00:00:00
ubuntucve
ubuntucve
CVE-2013-0306
2013-02-20 00:00:00
cvelist
cvelist
CVE-2013-0306
2013-05-02 14:00:00
openvas
openvas
Fedora Update for python-django FEDORA-2013-2843
2013-03-15 00:00:00
Fedora Update for python-django FEDORA-2013-2843
2013-03-15 00:00:00
Debian: Security Advisory (DSA-2634-1)
2013-02-26 00:00:00
nessus
nessus
Fedora 18 : python-django-1.4.5-2.fc18 (2013-2843)
2013-03-13 00:00:00
Fedora 17 : Django-1.4.5-1.fc17 (2013-2874)
2013-03-13 00:00:00
Debian DSA-2634-1 : python-django - several vulnerabilities
2013-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: python-django-1.4.5-2.fc18
2013-03-12 08:49:59
[SECURITY] Fedora 17 Update: Django-1.4.5-1.fc17
2013-03-12 08:54:04
seebug
seebug
Django 1.3/1.4 拒绝服务和信息泄露漏洞
2013-02-22 00:00:00
debian
debian
[SECURITY] [DSA 2634-1] python-django security update
2013-02-26 23:58:40
securityvulns
securityvulns
[SECURITY] [DSA 2634-1] python-django security update
2013-03-03 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2013-03-03 00:00:00
redhat
redhat
(RHSA-2013:0670) Moderate: Django security update
2013-03-21 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2013-02-21 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2013-03-07 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.009

Percentile

82.9%

JSON
Related for GHSA-G8XG-JGJ6-49R3
osv3prion1nvd1cve1debiancve1gitlab1ubuntucve1cvelist1openvas8nessus6fedora2seebug1debian1securityvulns2redhat1freebsd1ubuntu1