Lucene search

K
osvGoogleOSV:GHSA-G8XG-JGJ6-49R3
HistoryMay 05, 2022 - 2:48 a.m.

Django is vulnerable to Denial of Service attack in formset

2022-05-0502:48:45
Google
osv.dev
7
django
denial of service
formset
vulnerability
memory consumption
server errors
software

EPSS

0.009

Percentile

82.9%

The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.