Internet Bug Bounty: CVE-2024-56374 Potential denial-of-service in IPv6 validation
Discription

CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation A potential denial-of-service vulnerability was discovered in the IPv6 validation functions of Django. The lack of an upper bound limit on the length of input strings passed to the private functions clean_ipv6_address and is_valid_ipv6_address resulted in excessive resource consumption and slower processing when large, malformed strings were provided. The django.forms.GenericIPAddressField form field was affected, while the django.db.models.GenericIPAddressField model field was…Read More
References
Back to Main