CVE-2023-46695
ADVISORY - githubSummary
An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.
EPSS Score: 0.01977 (0.829)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Allocation of Resources Without Limits or Throttling
ADVISORY - github
ADVISORY - gitlab
ADVISORY - redhat
Improper Input Validation
PypA
CREATED
UPDATED
ADVISORY ID
PYSEC-2023-222
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| django | pypi | - | - | >=4.1,<4.1.13 | 4.1.13 |
| django | pypi | - | - | >=3.2,<3.2.23 | 3.2.23 |
| django | pypi | - | - | >=4.2,<4.2.7 | 4.2.7 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2023-46695
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
7.5highGitHub
CVSS SCORE
8.7highDebian
CREATED
UPDATED
ADVISORY IDCVE-2023-46695
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AlowUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2023-46695
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
7.5mediumBitnami
CREATED
UPDATED
ADVISORY ID
BIT-django-2023-46695
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
7.5highRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2023-46695
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)