CVE-2024-38875
CVE-2024-38875 is a potential denial of service vulnerability affecting Django versions 4.2 before 4.2.14 and 5.0 before 5.0.7. The urlize and urlizetrunc functions are susceptible to attack via carefully crafted inputs containing a large number of brackets. While the CVSS score is 0, indicating a base severity of none, SOCRadar's Vulnerability Risk Score (SVRS) is 36, suggesting a moderate level of risk. This vulnerability can be exploited to exhaust server resources, making the application unavailable to legitimate users. Although the SVRS is not critical (above 80), immediate patching is advisable to prevent potential exploitation. This issue highlights the importance of input validation and proper resource management in web applications. Failure to address CVE-2024-38875 could lead to service disruptions and impact user experience.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.