Django · Django · CVE-2022-41323
**Name of the Vulnerable Software and Affected Versions**
Django versions 3.2 through 3.2.15
Django versions 4.0 through 4.0.7
Django versions 4.1 through 4.1.1
**Description**
The issue is related to insufficient processing of regular expressions in internationalized URLs, which can be exploited to cause a denial of service attack via the `locale` parameter. This parameter is treated as a regular expression, allowing a remote attacker to potentially cause a denial of service.
**Recommendations**
For Django versions 3.2 through 3.2.15, update to version 3.2.16 or later.
For Django versions 4.0 through 4.0.7, update to version 4.0.8 or later.
For Django versions 4.1 through 4.1.1, update to version 4.1.2 or later.
As a temporary workaround, consider restricting access to internationalized URLs or disabling the use of the `locale` parameter until a patch is applied.