Description

The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.

Remediation

References

CVE-2015-0221

Related Vulnerabilities

WordPress Plugin Simple Custom CSS and JS Cross-Site Scripting (3.3)

TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6146)

WordPress Plugin Simple Download Button Shortcode 'file' Parameter Information Disclosure (1.0)

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0507)

WordPress Plugin Google Analytics Opt-Out Cross-Site Scripting (2.3.4)

Severity

Medium

Classification

CVE-2015-0221

Tags

Missing Update Known Vulnerabilities