CVE-2024-24680: Django denial-of-service attack in the intcomma template filter, affecting versions 3.2 before 3.2.24, 4.2 before 4.2.10, and 5.0 before 5.0.2.
A potential denial-of-service (DoS) vulnerability in the intcomma template filter of Django allows attackers to cause application crashes by feeding very long strings to the filter. This could lead to service disruption or denial of service for affected applications.
Recommended action: Upgrade to versions 3.2.24, 4.2.10, or 5.0.2 to mitigate the vulnerability. Apply the patches provided in the advisory references.
Read the verified Django brief on DevCurrent: https://devcurrent.net/cve/CVE-2024-24680?utm_source=devto&utm_medium=community&utm_campaign=editorial_distribution&utm_content=235
Top comments (0)