Red Hat Security AdvisoryRHSA-2023:5208
Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Released 2023-09-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.4 for RHEL 8 python39-django-3.2.21-1.el8ap, python3x-django-3.2.21-1.el8ap
- Red Hat Ansible Automation Platform 2.4 for RHEL 9 python-django-3.2.21-1.el9ap, python3-django-3.2.21-1.el9ap
Fixes 1 record
Priority LOW 36
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode cha…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01519 · Published 2023-11-03 · Partial fix · 3.2.21, 4.1.11 +1 CWE-1284
