Threats Tagged 'cve-2024-27351'

A potential regular expression denial-of-service (ReDoS) vulnerability exists in the django.utils.text. Truncator.words() function in the python-django package used by Red Hat OpenStack Platform 17.1. This vulnerability is identified as CVE-2024-27351 and has been rated with moderate severity by Red Hat Product Security. The issue could allow an attacker to cause a denial-of-service condition by exploiting inefficient regular expression processing. Red Hat has issued a security update addressing this vulnerability for affected versions. No known exploits are reported in the wild at this time.

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232 and CVE-2023-43665.

MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve#cve-2024-27351