CVE-2022-41323

2022-10-0400:00:00

ubuntu.com

denial of service

internationalized urls

regular expression

security vulnerability

unix

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.005 Low

EPSS

Percentile

75.7%

JSON

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2,
internationalized URLs were subject to a potential denial of service attack
via the locale parameter, which is treated as a regular expression.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchpython-django< 2:2.2.12-1ubuntu0.14UNKNOWN
ubuntu22.04noarchpython-django< 2:3.2.12-2ubuntu1.3UNKNOWN
ubuntu22.10noarchpython-django< 3.2.15-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	python-django	< 2:2.2.12-1ubuntu0.14	UNKNOWN
ubuntu	22.04	noarch	python-django	< 2:3.2.12-2ubuntu1.3	UNKNOWN
ubuntu	22.10	noarch	python-django	< 3.2.15-1ubuntu1	UNKNOWN