CVE-2024-41989

Summary

CVE-2024-41989 is a newly disclosed vulnerability affecting Django versions 5.0 before 5.0.8 and 4.2 before 4.2.15. The issue lies in the floatformat template filter, which is prone to excessive memory consumption when processing strings of large scientific notation numbers. This can lead to potential denial-of-service attacks by intentionally feeding the filter with such inputs, causing the application to consume significant system resources. It is recommended that affected users upgrade to the latest versions of Django as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.