CVE-2023-41164 PUBLISHED

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

EPSS 0.41% · 60.8th percentile

Risk Scores

EPSS Score
0.41%
60.8th percentile

Affected Products

VendorProductVersions
Bitnamidjango4.2.0, 4.2.0, 3.2.0
Bitnamidjango4.1.0, 4.2.0, 3.2.0

Timeline

References

Open in Interactive Console →