NetSight
IP …
high5.9

CVE-2024-24680

Django denial-of-service attack in the intcomma template filter

Impact

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

Affected packages

EcosystemPackageAffectedFixed in
pipdjango>= 4.2, < 4.2.104.2.10
pipDjango>= 3.2, < 3.2.243.2.24

Affected products

VendorProductAffected versions
DjangoprojectDjango
from 3.2 before 3.2.24
from 4.2 before 4.2.10
from 5.0 before 5.0.2

Weakness classification

CWE-770

References