【CVE修复】CVE-2024-27351

<div>
 <div class="document">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【软件包名】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">python-django<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【CVE ID】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">CVE-2024-27351<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【漏洞评级】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">Medium<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【评分向量】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【CWE ID】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"><span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【漏洞描述】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232 and CVE-2023-43665.<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; font-style: italic; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【参考链接】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 
 </div>
</div>

OpenCloudOS Stream/python-django

内容风险标识

评论 (0)

OpenCloudOS Stream/python-django .gitee-modal { width: 500px !important; }

内容风险标识