CVE-2024-24680

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

Affected products

Alt Linux, Astra Linux, Debian, Django, Linuxmint, Red Os, Ubuntu

Djangoproject Django

< 3.2.24, 4.2.10, 5.0.2

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

1.6% (73th percentile)

NVD status

Modified

Published

2024-02-06

No exploit for CVE-2024-24680 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.