5

CVE-2011-4137

The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service (resource consumption) via a URL associated with (1) a slow response, (2) a completed TCP connection with no application data sent, or (3) a large amount of application data, a related issue to CVE-2011-1521.

Data is provided by the National Vulnerability Database (NVD)
Djangoproject ≫ Django Version <= 1.2.6
Djangoproject ≫ Django Version0.91
Djangoproject ≫ Django Version0.95
Djangoproject ≫ Django Version0.95.1
Djangoproject ≫ Django Version0.96
Djangoproject ≫ Django Version1.0
Djangoproject ≫ Django Version1.0.1
Djangoproject ≫ Django Version1.0.2
Djangoproject ≫ Django Version1.1
Djangoproject ≫ Django Version1.1.0
Djangoproject ≫ Django Version1.1.2
Djangoproject ≫ Django Version1.1.3
Djangoproject ≫ Django Version1.2
Djangoproject ≫ Django Version1.2.1
Djangoproject ≫ Django Version1.2.1 Update2
Djangoproject ≫ Django Version1.2.2
Djangoproject ≫ Django Version1.2.3
Djangoproject ≫ Django Version1.2.4
Djangoproject ≫ Django Version1.2.5
Djangoproject ≫ Django Version1.3
Djangoproject ≫ Django Version1.3 Updatealpha1
Djangoproject ≫ Django Version1.3 Updatealpha2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.74% 0.808
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P