CVE-2023-46695

Summary

CVE-2023-46695 is a vulnerability affecting Django versions 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. This issue stems from the slow NFKC normalization process on Windows systems. Consequently, the django.contrib.auth.forms.UsernameField becomes susceptible to a Denial of Service (DoS) attack through specific inputs comprising a vast number of Unicode characters. The exploitation of this vulnerability could lead to a significant increase in server response time, potentially causing service disruptions. It is crucial for affected Django users to upgrade their software promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.