CVE-2024-56374

CVSS 3.1 Score 5.8 of 10 (medium)

Details

Published Jan 14, 2025
CWE ID 770

Summary

CVE-2024-56374 is a vulnerability affecting Django versions 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. The issue lies in the lack of an upper-bound limit during IPv6 validation, which can potentially be exploited for denial-of-service attacks. The undocumented functions clean_ipv6_address and is_valid_ipv6_address, as well as the django.forms.GenericIPAddressField form field, are susceptible to this vulnerability. However, the django.db.models.GenericIPAddressField model field remains unaffected.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Django

Affected Vendors

  • Django Software Foundation

Advisories, Assessments, and Mitigations