Description
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.
Remediation
References
Related Vulnerabilities
SugarCRM Missing Authorization Vulnerability (CVE-2020-7472)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1963)
WordPress Plugin WooCommerce Anti-Fraud Security Bypass (3.2)
WordPress Plugin PressForward Cross-Site Scripting (4.3.0)
WordPress Plugin GiveWP-Donation and Fundraising Platform Security Bypass (2.5.4)