CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service)…

published November 3, 2023

CVSS
—
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01519 · 74.4th percentile
Published
2023-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service)…
    cvelistv5