7.5
CVSSv3

CVE-2022-41323

Published: 16/10/2022 Updated: 07/11/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

In Django 3.2 prior to 3.2.16, 4.0 prior to 4.0.8, and 4.1 prior to 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

djangoproject django

Vendor Advisories

Synopsis Important: Satellite 613 Release Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update is now available for Red Hat Satellite 613 The release contains anew version of Satellite and important security fixes ...
Synopsis Low: RHUI 430 release - Security Fixes, Bug Fixes, and Enhancements Update Type/Severity Security Advisory: Low Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An updated version of Red Hat Update Infrastructure (RHUI) is now available RHUI 43 fixes a ...
Multiple security issues were found in Django, a Python web development framework, which could result in denial of service, SQL injection or cross-site scripting For the stable distribution (bullseye), these problems have been fixed in version 2:2228-1~deb11u1 We recommend that you upgrade your python-django packages For the detailed security ...
DescriptionThe MITRE CVE dictionary describes this issue as: In Django 32 before 3216, 40 before 408, and 41 before 412, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression ...
Severity Unknown Remote Unknown Type Unknown Description AVG-2809 python-django 41-1 412-1 Unknown Unknown ...