{"schema_version":"1.9.0","id":"CVE-2024-45230","published":"2024-10-08T00:00:00Z","modified":"2026-08-12T03:51:24.415565005Z","aliases":["BIT-django-2024-45230","GHSA-5hgc-2vfp-mqvc","PYSEC-2024-102"],"related":["SUSE-SU-2024:3139-1","SUSE-SU-2024:3161-1","SUSE-SU-2024:3187-1","openSUSE-SU-2024:0282-1","openSUSE-SU-2024:14310-1","openSUSE-SU-2024:14318-1","openSUSE-SU-2026:10005-1","openSUSE-SU-2026:11235-1","openSUSE-SU-2026:11248-1","openSUSE-SU-2026:11270-1"],"details":"An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/django/django","events":[{"introduced":"0"},{"fixed":"6f9fea33137fee6416ff43b775aa9567440a23d3"},{"introduced":"52821001bb62b764d73e63812133f199b8fef9eb"},{"fixed":"8e68f938f376cf2ca22a7e8ff0bcbe1b7a5832d1"},{"introduced":"84d09a547fe35e10018ab242602ca76c29ca91a1"},{"last_affected":"84d09a547fe35e10018ab242602ca76c29ca91a1"}],"database_specific":{"cpe":["cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:5.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.2.0"},{"fixed":"4.2.16"},{"introduced":"5.0"},{"fixed":"5.0.9"},{"introduced":"5.1"},{"last_affected":"5.1"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["5.1","stable/5.1.x","4.2.15","5.0.8","5.0.7","4.2.14","5.0.6","4.2.13","4.2.12","5.0.5","5.0.4","4.2.11","5.0.3","4.2.10","5.0.2","4.2.9","5.0.1","5.0","4.2.8","5.0rc1","4.2.7","5.0b1","4.2.6","5.0a1","4.2.5","4.2.4","4.2.3","4.2.2","4.2.1","4.2","4.2rc1","4.2b1","4.2a1","1.7a2","1.4","1.3","1.2.1","1.2","1.1","1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45230.json"}}],"references":[{"type":"WEB","url":"https://docs.djangoproject.com/en/dev/releases/security/"},{"type":"WEB","url":"https://groups.google.com/forum/#%21forum/django-announce"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45230.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45230"},{"type":"ARTICLE","url":"https://www.djangoproject.com/weblog/2024/sep/03/security-releases/"}],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45230.json","unresolved_ranges":[{"extracted_events":[{"introduced":"5.1"},{"fixed":"5.1.1"},{"introduced":"5.0"},{"fixed":"5.0.9"},{"introduced":"4.2"},{"fixed":"4.2.16"}],"source":"DESCRIPTION"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}