Intrusion PreventionDjango.UsernameField.DoS
Description
This indicates an attack attempt to exploit a Denial of Service Vulnerability in Django Software Foundation Django.
This vulnerability is due to slow normalization of user supplied inputs. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successfully exploiting this vulnerability could result in denial of service.
Affected Products
Django Software Foundation Django 3.2.x prior to 3.2.23
Django Software Foundation Django 4.1.x prior to 4.1.13
Django Software Foundation Django 4.2.x prior to 4.2.7
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.djangoproject.com/weblog/2023/nov/01/security-releases/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2024-04-18 | 27.771 |
| ID | 55507 |
| Created | Apr 10, 2024 |
| Updated | May 01, 2024 |
| Risk |
|
| CVE ID | CVE-2023-46695 |
| Exploit Prediction Score | 0.06% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Other |