요약
- CVE-2024-28865은(는) wiki, django-wiki (django-wiki project)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 0.61%, 전체 취약점의 49.4%보다 높음.
- 조치: 0.10.1 이상으로 업데이트하세요.
| Package | Affected versions | Patched versions |
|---|
| wiki PyPI | < 0.10.1
| 0.10.1
|
| django-wiki | < 0.10.1
| 0.10.1
|
Description
Impact
All historical installations of django-wiki are vulnerable to maliciously crafted article content, that can cause severe use of server CPU through a regular expression loop.
Patches
Workarounds
Close off access to create and edit articles by anonymous users.
References
Are there any links users can visit to find out more?
NVD description
django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free