Skip to content
OpenAdvisories
High USN-6623-1 1 CVE

python-django vulnerability

Published Feb 6, 2024 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Django incorrectly handled certain inputs
that uses intcomma template filter. An attacker could possibly
use this issue to cause a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS python-django 2:2.2.12-1ubuntu0.21
Ubuntu · 22.04 LTS 22.04:LTS python-django 2:3.2.12-2ubuntu1.10
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS python-django 1:1.11.11-1ubuntu1.21+esm3

Vulnerabilities 1

  • High 7.5
    CVE-2024-24680

    Django denial-of-service attack in the intcomma template filter

    An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

    python-django django python-django py3-django Debian Ubuntu Wolfi PyPI

References

  • report
    https://ubuntu.com/security/CVE-2024-24680