CVE-2024-28865

Katalog CVE

CVSS 7.5 · High EPSS 0,61%

Kerentanan Inefficient Regular Expression Complexity pada django-wiki project django-wiki. Skor CVSS 3.1 7.5 (High) menurut github.com.

Deskripsi (NVD)

django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.

Rincian

Terbit di NVD

18 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1333: Inefficient Regular Expression Complexity

EPSS (30 hari)

0,61% peluang dieksploitasi; lebih tinggi dari 47,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/django-wiki/django-wiki/security/advisories/GHSA-wj85-w4f4-xh8h advisory vendor
• https://github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88c patch