Lucene search
Veracode Vulnerability DatabaseVERACODE:30300HistoryApr 30, 2021 - 4:45 a.m.
Denial Of Service (DoS)
2021-04-3004:45:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
denial of service
django-filters
vulnerable
exponential input
application crash
malicious input
EPSS
0.002
Percentile
61.6%
django-filters is vulnerable to denial of service. An attacker is able to cause an application crash by submitting malicious input using exponential format with large exponents.
References
github.com/carltongibson/django-filter/commit/340cf7a23a2b3dcd7183f6a0d6c383e85b130d2b
github.com/carltongibson/django-filter/pull/1272
github.com/carltongibson/django-filter/releases/tag/2.4.0
github.com/carltongibson/django-filter/security/advisories/GHSA-x7gm-rfgv-w973
lists.fedoraproject.org/archives/list/[email protected]/message/DPHENTRHRAYFXYPPBT7JRHZRWILRY44S/
lists.fedoraproject.org/archives/list/[email protected]/message/FAT2ZAEF6DM3VFSOHKB7X3ASSHGQHJAK/
pypi.org/project/django-filter/
security.netapp.com/advisory/ntap-20210604-0010/
Related
openvas
openvas
Fedora: Security Advisory for python-django-filter (FEDORA-2021-1acbee2459)
2021-10-30 00:00:00
Fedora: Security Advisory for python-django-filter (FEDORA-2023-4dee6d0a76)
2023-06-16 00:00:00
Fedora: Security Advisory for python-django-filter (FEDORA-2021-f213fea441)
2021-10-30 00:00:00
mageia
mageia
Updated python-django-filter packages fix security vulnerability
2021-11-19 00:50:59
fedora
fedora
[SECURITY] Fedora 34 Update: python-django-filter-21.1-1.fc34
2021-10-27 02:09:48
[SECURITY] Fedora 35 Update: python-django-filter-21.1-1.fc35
2021-10-29 23:28:06
[SECURITY] Fedora 38 Update: python-django-filter-23.2-1.fc38
2023-06-15 01:27:53
osv
osv
PYSEC-2021-64
2021-04-29 21:15:00
Potential DoS with NumberFilter conversion to integer values.
2020-09-28 19:05:29
CVE-2020-15225
2021-04-29 21:15:08
redhatcve
redhatcve
CVE-2020-15225
2021-04-30 21:27:44
nessus
nessus
Fedora 38 : python-django-filter (2023-4dee6d0a76)
2023-06-15 00:00:00
debiancve
debiancve
CVE-2020-15225
2021-04-29 21:15:08
nvd
nvd
CVE-2020-15225
2021-04-29 21:15:08
cve
cve
CVE-2020-15225
2021-04-29 21:15:08
ubuntucve
ubuntucve
CVE-2020-15225
2021-04-29 00:00:00
prion
prion
Design/Logic Flaw
2021-04-29 21:15:00
cvelist
cvelist
CVE-2020-15225 Denial of Service vulnerability in django-filter
2021-04-29 00:00:00
github
github
Potential DoS with NumberFilter conversion to integer values.
2020-09-28 19:05:29