#VU59179 Resource management error in Django - CVE-2021-45115

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU59179

#VU59179 Resource management error in Django - CVE-2021-45115

Published: January 4, 2022


Vulnerability identifier: #VU59179
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2021-45115
CWE-ID: CWE-399
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Django
Software vendor:
Django Software Foundation

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources in UserAttributeSimilarityValidator when evaluating submitted password that were artificially large in relative to the comparison values. A remote attacker can pass specially crafted password to the application and perform a denial of service (DoS) attack.


Remediation

Install updates from vendor's website.

External links