CVE-2014-0481 in Django
Zusammenfassung (Englisch)
The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
19.12.2013
Veröffentlichung
26.08.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 67426 | Django File Upload Name Collision Denial of Service | 16 | Unbewiesen | Offizieller Fix | CVE-2014-0481 |