In Django 3.2 before 3.2.17, 4.0... CVE-2023-23969
-
AV
AC
AU
C
I
A
发布：
2023-02-01
修订：
2023-11-07
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有4条受影响产品信息
