Published: 02/08/2019 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

An issue exists in Django 1.11.x prior to 1.11.23, 2.1.x prior to 2.1.11, and 2.2.x prior to 2.2.4. Due to the behaviour of the underlying HTMLParser, django.utils.html.strip_tags would be extremely slow to evaluate certain inputs containing large sequences of nested incomplete HTML entities.

Vulnerable Product	Search on Vulmon	Subscribe to Product
djangoproject django
opensuse leap 15.1

Synopsis Moderate: python-django security update Type/Severity Security Advisory: Moderate Topic An update for python-django is now available for Red Hat OpenStack Platform15 (Stein)Red Hat Product Security has rated this update as having a security impactof Moderate A Common Vulnerability Scoring System ...

Synopsis Moderate: python-django security update Type/Severity Security Advisory: Moderate Topic An update for python-django is now available for Red Hat OpenStack Platform13 (Queens)Red Hat Product Security has rated this update as having a security impactof Moderate A Common Vulnerability Scoring System ...

Debian Bug report logs - #934026 python-django: CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235 Package: python-django; Maintainer for python-django is Debian Python Modules Team <python-modules-team@listsaliothdebianorg>; Source for python-django is src:python-django (PTS, buildd, popcon) Reported by: "Chris ...

Several security issues were fixed in Django ...

Several vulnerabilities were discovered in python-django, a web development framework They could lead to remote denial-of-service or SQL injection, For the oldstable distribution (stretch), these problems have been fixed in version 1:1107-2+deb9u6 For the stable distribution (buster), these problems have been fixed in version 11123-1~deb10u1 ...

Due to the behavior of the underlying HTMLParser, djangoutilshtmlstrip_tags() would be extremely slow to evaluate certain inputs containing large sequences of nested incomplete HTML entities The strip_tags() method is used to implement the corresponding striptags template filter, which was thus also vulnerable strip_tags() now avoids recursive ...

oss-sec mailing list archives   By Date By Thread </form>    Django security releases issued: Multiple CVEs   From: Carlton Gibson &lt ...

CWE-400 https://www.djangoproject.com/weblog/2019/aug/01/security-releases/https://docs.djangoproject.com/en/dev/releases/security/http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html https://seclists.org/bugtraq/2019/Aug/15 https://www.debian.org/security/2019/dsa-4498 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html https://security.netapp.com/advisory/ntap-20190828-0002/https://security.gentoo.org/glsa/202004-17 https://groups.google.com/forum/#%21topic/django-announce/jIoju2-KLDs https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK/https://access.redhat.com/errata/RHSA-2020:1324 https://nvd.nist.gov https://usn.ubuntu.com/4084-1/

CVE-2019-14233

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect