Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Django i18n远程拒绝服务漏洞
Vulnerability Description
Django是Django软件基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 Django国际化系统(i18n)在处理畸形格式的HTTP请求头时存在漏洞,远程攻击者可能此漏洞导致拒绝服务。 Django国际化系统(i18n)没有正确地处理HTTP头,如果远程攻击者发送了特制的HTTP Accept-Language请求的话,就可能导致分配大量的内存。成功攻击要求启用了USE_I18N选项和i18n中间件组件。
CVSS Information
N/A
Vulnerability Type
N/A