Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Django 拒绝服务漏洞
Vulnerability Description
Django是Django软件基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 Django中的表单库中存在漏洞。远程攻击者可通过修改的‘max_num’参数利用该漏洞绕过对表单集既定的资源限制，造成拒绝服务（内存耗尽）或引起服务器错误。以下版本中存在漏洞：1.3.6之前的1.3.x版本，1.4.4之前的1.4.x版本， release candidate 2之前的1.5版本。
CVSS Information
N/A
Vulnerability Type
N/A