VDB

CVE-2024-24680

CVE-2024-24680 PUBLISHED CVSS 7.5 HIGH

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

EPSS 1.61% · 75.1th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.61%
75.1th percentile

Affected Products

VendorProductVersions
Bitnamidjango3.2.0, 4.2.0, 5.0.0
Bitnamidjango3.2.0, 4.2.0, 5.0.0

Timeline

  • Feb 6, 2024 CVE Published
  • Feb 8, 2024 EPSS Score
  • Apr 4, 2024 EPSS Score
  • May 29, 2024 EPSS Score
  • Jun 26, 2024 EPSS Score
  • Aug 20, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 15, 2024 EPSS Score
  • Nov 23, 2024 Coalition ESS Score
  • Dec 10, 2024 EPSS Score
  • Feb 3, 2025 Coalition ESS Score
  • Feb 4, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›