Vulnetix
Try Vulnetix Request Demo
CVE-2023-36053 PUBLISHED

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.

EPSS 9.59% · 92.8th percentile

Risk Scores

EPSS Score
9.59%
92.8th percentile

Affected Products

VendorProductVersions
Bitnamidjango4.2.0, 4.2.0, 3.2.0
Bitnamidjango4.0.0, 4.2.0, 3.2.0

Timeline

References

Open in Interactive Console →