CVE-2024-45230
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 8, 2024
Updated: Mar 17, 2025
CWE ID 120
Summary
CVE-2024-45230 is a denial-of-service vulnerability affecting Django versions 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are susceptible to this issue when handling large inputs with a specific sequence of characters. This can result in excessive memory consumption and potential crashes, leading to a denial-of-service condition for the affected applications. It is recommended to upgrade to the patched versions to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Django
Affected Vendors
- Django Software Foundation