CVE-2013-0306
02.05.2013, 14:55
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.Enginsight
| Vendor | Product | Version |
|---|---|---|
| djangoproject | django | 1.3 |
| djangoproject | django | 1.3:alpha1 |
| djangoproject | django | 1.3:beta1 |
| djangoproject | django | 1.3.1 |
| djangoproject | django | 1.3.2 |
| djangoproject | django | 1.3.3 |
| djangoproject | django | 1.4 |
| djangoproject | django | 1.4:alpha |
| djangoproject | django | 1.4:beta |
| djangoproject | django | 1.4.1 |
| djangoproject | django | 1.4.2 |
| djangoproject | django | 1.5:alpha |
| djangoproject | django | 1.5:beta |
| canonical | ubuntu_linux | 10.04 |
| canonical | ubuntu_linux | 11.10 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 12.10 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References