You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.
mend-bolt-for-githubbot
changed the title
CVE-2022-41323 (Medium) detected in Django-3.2.14-py3-none-any.whl
CVE-2022-41323 (High) detected in Django-3.2.14-py3-none-any.whl
Dec 5, 2022
CVE-2022-41323 - High Severity Vulnerability
Vulnerable Library - Django-3.2.14-py3-none-any.whl
A high-level Python web framework that encourages rapid development and clean, pragmatic design.
Library home page: https://files.pythonhosted.org/packages/c0/a8/4afc7742ad1e506909ce8c5056761f22c8a2db0a8b4a46cfa290b1cd6685/Django-3.2.14-py3-none-any.whl
Dependency Hierarchy:
Found in base branch: main
Vulnerability Details
In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.
Publish Date: 2022-10-16
URL: CVE-2022-41323
CVSS 3 Score Details (7.5)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41323
Release Date: 2022-10-16
Fix Resolution: Django - 3.2.16,4.0.8,4.1.2
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: