CVE-2025-32873 PoC — Django 安全漏洞

Source

https://github.com/Apollo-R3bot/django-vulnerability-CVE-2025-32873

Associated Vulnerability

Title: Django 安全漏洞 (CVE-2025-32873)
Description:An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a potential denial-of-service (slow performance) when processing inputs containing large sequences of incomplete HTML tags. The template filter striptags is also vulnerable, because it is built on top of strip_tags().

Description

Django Security Issue (CVE-2025-32873)

Readme

# Django Security Issue on strip_tags()

#requirements
- Django 5.2
- Django Rate Limit (pip install django-ratelimit)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →