En bref
- CVE-2013-0306 est une vulnérabilité MOYENNE (CVSS 5.0) touchant django, django (djangoproject).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.6%, plus élevée que 85.3% des vulnérabilités.
- Correctif : mettre à jour vers 1.3.6, 1.4.4 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| django PyPI | ≥ 1.3, < 1.3.6≥ 1.4, < 1.4.4
| 1.3.61.4.4
|
| django | = 1.3= 1.3.1= 1.3.2= 1.3.3= 1.4= 1.4.1= 1.4.2= 1.5
| No fix yet |
Description
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.
NVD description
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free