Description (CNA)
django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| django-wiki / django-wiki | affected < 0.10.1 |
CWE
CWE-1333
References
- https://github.com/django-wiki/django-wiki/security/advisories/GHSA-wj85-w4f4-xh8h
- https://github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88c
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.