Description
An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.
Remediation
References
Related Vulnerabilities
Moodle Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2012-1160)
PHP Out-of-bounds Read Vulnerability (CVE-2020-7059)
OpenSSL Cryptographic Issues Vulnerability (CVE-2011-5095)
Oracle JRE CVE-2013-5842 Vulnerability (CVE-2013-5842)
WordPress Plugin Answer My Question Cross-Site Scripting (1.3)