CVE-2023-41164

Published: Nov 3, 2023

Modified: Nov 4, 2025

PUBLISHED

Description

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://groups.google.com/forum/#%21forum/django-announce

https://docs.djangoproject.com/en/4.2/releases/security/

https://www.djangoproject.com/weblog/2023/sep/04/security-releases/

FEDORA-2023-a67af7d8f4

vendor-advisory

https://security.netapp.com/advisory/ntap-20231214-0002/

FEDORA-2024-84fbbbb914

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-41164

Description

Affected Products

References