Test ID:	1.3.6.1.4.1.25623.1.0.127319
Category:	Denial of Service
Title:	Django 3.2.x < 3.2.17, 4.0.x < 4.0.9, 4.1.x < 4.1.6 DoS Vulnerability - Windows
Summary:	Django is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Django is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if large header values are sent. Affected Software/OS: Django versions 3.2.x prior to 3.2.17, 4.0.x prior to 4.0.9, 4.1.x prior to 4.1.6. Solution: Update to version 3.2.17, 4.0.9, 4.1.6 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-23969 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI/ https://docs.djangoproject.com/en/4.1/releases/security/ https://groups.google.com/forum/#!forum/django-announce https://lists.debian.org/debian-lts-announce/2023/02/msg00000.html
Copyright	Copyright (C) 2023 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.