漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred significant overhead in evaluating a submitted password that was artificially large in relation to the comparison values. In a situation where access to user registration was unrestricted, this provided a potential vector for a denial-of-service attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Django 安全漏洞
Vulnerability Description
Django是Django基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 Django 2.2.26之前的2.2版本, 3.2.11之前的3.2版本, 和4.0.1之前的4.0版本存在安全漏洞，该漏洞源于UserAttributesMilarityValidator在评估提交的密码时产生了巨大的资源消耗。攻击者可利用该漏洞执行拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A