The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2015-03-25T14:00:00
Updated: 2024-08-06T05:10:16.424Z
Reserved: 2015-03-17T00:00:00
Link: CVE-2015-2316
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-03-25T14:59:02.940
Modified: 2024-11-21T02:27:11.993
Link: CVE-2015-2316
Redhat