logo

Database

Asymmetric denial of service - ReDoS In django

Description

Django ReDoS in validators.URLValidator validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2015-51452. NVD-2015-51453. OSV-2015-51454. GCVE-2015-51455. security.gentoo.org

References

1. https://github.com/django/django/commit/8f9a4d3a2bc42f14bb437defd30c7315adbff22c2. https://github.com/django/django/blob/4555a823fd57e261e1b19c778429473256c8ea08/docs/releases/1.8.3.txt#L63-L683. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-21.yaml4. https://web.archive.org/web/20150924150801/http://www.securitytracker.com/id/10328205. https://web.archive.org/web/20170526042302/http://www.securityfocus.com/bid/756916. https://www.djangoproject.com/weblog/2015/jul/08/security-releases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.