Description
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2006-5337 Vulnerability (CVE-2006-5337)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) Security Bypass (5.4)
WordPress Plugin iThemes Security (formerly Better WP Security) Information Disclosure (5.1.1)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0304)