mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00
Code Issues 32 Releases Wiki Activity

[4.1.x] Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

Browse Source 
Thanks to Benjamin Balder Bach for the report.
This commit is contained in:
Adam Johnson
2022-09-02 09:44:05 +01:00
committed by Carlton Gibson
parent 7843c43c49
commit 9d656ea51d
5 changed files with 23 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/releases/4.0.8.txt
View File

@@ -6,4 +6,8 @@ Django 4.0.8 release notes
Django 4.0.8 fixes a security issue with severity "medium" in 4.0.7.
...
CVE-2022-41323: Potential denial-of-service vulnerability in internationalized URLs
===================================================================================
Internationalized URLs were subject to potential denial of service attack via
the locale parameter.