PT-2015-4529

CVE-2015-0222

Publicado

2015-01-13

Atualizado

2022-05-17

Descrição por

CVSS 3.1

7.5

Alta

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Django versions 1.6.x through 1.6.9 Django versions 1.7.x through 1.7.2

Description The issue allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries, when show hidden initial is set to True in ModelMultipleChoiceField.

Recommendations For Django versions 1.6.x through 1.6.9, update to version 1.6.10 or later. For Django versions 1.7.x through 1.7.2, update to version 1.7.3 or later.

Explorabilidade

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-17

CWE-770: Allocation of Resources Without Limits or Throttling

Identificadores relacionados

CVE-2015-0222

GHSA-6G95-X6CJ-MG4V