Test ID:	1.3.6.1.4.1.25623.1.0.153780
Category:	Denial of Service
Title:	Django 4.x < 4.2.18, 5.0.x < 5.0.11, 5.1.x < 5.1.5 DoS Vulnerability - Linux
Summary:	Django is prone to a denial of service (DoS) vulnerability in; IPv6 validation.
Description:	Summary: Django is prone to a denial of service (DoS) vulnerability in IPv6 validation. Vulnerability Insight: Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address were vulnerable, as was the django.forms.GenericIPAddressField form field, which has now been updated to define a max_length of 39 characters. The django.db.models.GenericIPAddressField model field was not affected. Affected Software/OS: Django version 4.x prior to 4.2.18, 5.0.x prior to 5.0.11 and 5.1.x prior to 5.1.5. Solution: Update to version 4.2.18, 5.0.11, 5.1.5 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-56374
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.