923978 – (CVE-2024-24680) <dev-python/django-{3.2.24,4.2.10,5.0.2}: Potential denial-of-service in intcomma template filter

Bug 923978 (CVE-2024-24680) - <dev-python/django-{3.2.24,4.2.10,5.0.2}: Potential denial-of-service in intcomma template filter

Summary: <dev-python/django-{3.2.24,4.2.10,5.0.2}: Potential denial-of-service in intc...

Status:	CONFIRMED

Alias:	CVE-2024-24680

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Gentoo Security

URL:	https://docs.djangoproject.com/en/5.0...
Whiteboard:	B3 [glsa?]
Keywords:

Depends on:	923975 923976 923977
Blocks:
	Show dependency tree

Reported:	2024-02-07 07:47 UTC by Michał Górny
Modified:	2024-02-12 04:13 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Michał Górny archtester

2024-02-07 07:47:52 UTC

CVE-2024-24680: Potential denial-of-service in intcomma template filter¶

The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

Comment 1 Michał Górny archtester

2024-02-07 19:18:50 UTC

cleanup done.