Lucene search

K
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-77BAC2678630F1E795431C0B2B4DAEDC
HistoryMay 05, 2022 - 12:00 a.m.

Django is vulnerable to Denial of Service attack in formset

2022-05-0500:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
10
django
form library
vulnerability

EPSS

0.009

Percentile

82.9%

The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.