Description

The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.

Remediation

References

CVE-2013-0306

Related Vulnerabilities

WordPress Plugin xili-language Multiple Unspecified Vulnerabilities (2.17.0)

MySQL CVE-2020-2895 Vulnerability (CVE-2020-2895)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-3064)

WordPress Plugin Custom Field Template PHP Object Injection (2.5.7)

Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9749)

Severity

Medium

Classification

CVE-2013-0306

Tags

Missing Update Known Vulnerabilities