CVE-2023-24580: Resource exhaustion in Django, discovered in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. The vulnerability allows for denial-of-service attacks via excessive multipart form inputs.
The vulnerability allows attackers to cause resource exhaustion, leading to denial-of-service (DoS) attacks. This could disrupt services and compromise system stability.
Recommended action: Upgrade to Django 3.2.18, 4.0.10, or 4.1.7 to mitigate the vulnerability. Apply the patches provided in the advisory references.
Read the verified Django brief on DevCurrent: https://devcurrent.net/cve/CVE-2023-24580?utm_source=devto&utm_medium=community&utm_campaign=editorial_distribution&utm_content=111
Top comments (0)