NetSight
IP …
high7.5

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial…

Impact

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.

Affected products

VendorProductAffected versions
DjangoprojectDjango
from 3.2 before 3.2.20
from 4.0 before 4.1.10
from 4.2 before 4.2.3
DebianDebian Linux
Versions 10.0, 11.0, 12.0
FedoraprojectFedora
Versions 37, 38

Weakness classification

CWE-1333

References