Carltongibson Django-Filter vulnerabilities

1 known vulnerability affecting carltongibson/django-filter.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-15225MEDIUMCVSS 6.5fixed in 2.4.02021-04-29

CVE-2020-15225 [MEDIUM] CWE-681 CVE-2020-15225: django-filter is a generic system for filtering Django QuerySets based on user selections. In django django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated `NumberFilter` instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential format with sufficiently large exponents. Version 2.4