In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-02-01T00:00:00

Updated: 2024-08-02T10:49:08.226Z

Reserved: 2023-01-20T00:00:00

Link: CVE-2023-23969

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-02-01T19:15:08.763

Modified: 2024-11-21T07:47:10.833

Link: CVE-2023-23969

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-02-01T00:00:00Z

Links: CVE-2023-23969 - Bugzilla