CVE-2024-41991

Summary

CVE-2024-41991 is a denial-of-service vulnerability affecting Django versions 5.0 before 5.0.8 and 4.2 before 4.2.15. maliciously crafted inputs containing a vast number of Unicode characters can exploit the urlize, urlizetrunc template filters, and the AdminURLFieldWidget widget, resulting in excessive memory consumption and potential server crashes. This issue may lead to unavailability of services and potentially impact application availability. Users are urged to update their Django installations to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.