CVE Vulnerabilities

CVE-2024-41989

Published: Aug 07, 2024 | Modified: Aug 08, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.

Affected Software

Name Vendor Start Version End Version
Django Djangoproject 4.2 (including) 4.2.15 (excluding)
Django Djangoproject 5.0 (including) 5.0.8 (excluding)
Red Hat Ansible Automation Platform 2.4 for RHEL 8 RedHat python3x-django-0:4.2.15-1.el8ap *
Red Hat Ansible Automation Platform 2.4 for RHEL 9 RedHat python-django-0:4.2.15-1.el9ap *
Red Hat Ansible Automation Platform 2.5 for RHEL 8 RedHat automation-controller-0:4.6.2-1.el8ap *
Red Hat Ansible Automation Platform 2.5 for RHEL 9 RedHat automation-controller-0:4.6.2-1.el9ap *
Python-django Ubuntu devel *
Python-django Ubuntu esm-infra/bionic *
Python-django Ubuntu focal *
Python-django Ubuntu jammy *
Python-django Ubuntu noble *
Python-django Ubuntu oracular *
Python-django Ubuntu trusty/esm *
Python-django Ubuntu upstream *

References