Django was affected by CVE-2024-53907 and CVE-2024-53908

The Django team has released Django 5.1.4, Django 5.0.10, and Django 4.2.17 versions to address two security vulnerabilities. The first vulnerability tracked as CVE-2024-53907 with a CVSS score of 7.5 is a DoS vulnerability in the django.utils.html.strip_tags() method and striptags template filter. According to the advisory, “certain inputs containing large sequences of nested incomplete […]

U.S. CISA adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 01/Dec 08:59

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog. The U.S....

U.S. CISA adds a new an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 04/Dec 21:56

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a new OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog. The U.S....

U.S. CISA adds a Meta React Server Components flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 08/Dec 09:01

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Meta React Server Components flaw to its Known Exploited Vulnerabilities catalog....

U.S. CISA adds a Meta React Server Components flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 08/Dec 09:01

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Meta React Server Components flaw to its Known Exploited Vulnerabilities catalog....

Critical Vulnerabilities in React Server Components and Next.js

itsecuritynews.info - 04/Dec 21:06

We discuss the CVSS 10.0-rated RCE vulnerabilities in the Flight protocol used by React Server Components. These are tracked as CVE-2025-55182 and...

Multiple Django Vulnerability Expose Applications to SQL Injection and DoS Attacks

itsecuritynews.info - 03/Dec 07:32

The Django development team has released critical security patches for three major versions of the popular Python web framework, addressing two...

Multiple Django Vulnerability Expose Applications to SQL Injection and DoS Attacks

itsecuritynews.info - 03/Dec 07:32

The Django development team has released critical security patches for three major versions of the popular Python web framework, addressing two...

Splunk Enterprise Vulnerabilities Allows Privileges Escalation Via Incorrect File Permissions

itsecuritynews.info - 05/Dec 08:33

A high-severity vulnerability has been disclosed in Splunk affecting its Enterprise and Universal Forwarder products for Windows, stemming from...

Splunk Enterprise Vulnerabilities Allows Privileges Escalation Via Incorrect File Permissions

itsecuritynews.info - 05/Dec 08:33

A high-severity vulnerability has been disclosed in Splunk affecting its Enterprise and Universal Forwarder products for Windows, stemming from...

CISA Warns of Google Chromium 0-Day Vulnerability Exploited in Attacks

itsecuritynews.info - 14:32

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical zero-day vulnerability in Google Chromium’s ANGLE graphics...

Headings :

Django was affected by CVE-2024-53907 and CVE-2024-53908

Articles similaires

U.S. CISA adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds a new an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds a Meta React Server Components flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds a Meta React Server Components flaw to its Known Exploited Vulnerabilities catalog

Critical Vulnerabilities in React Server Components and Next.js

Multiple Django Vulnerability Expose Applications to SQL Injection and DoS Attacks

Multiple Django Vulnerability Expose Applications to SQL Injection and DoS Attacks

Splunk Enterprise Vulnerabilities Allows Privileges Escalation Via Incorrect File Permissions

Splunk Enterprise Vulnerabilities Allows Privileges Escalation Via Incorrect File Permissions

CISA Warns of Google Chromium 0-Day Vulnerability Exploited in Attacks

Latest releases