CVE-2024-24680 — Django denial-of-service attack in the intcomma template filter
CVE-2024-24680: Django denial-of-service attack in the intcomma template filter, affecting versions 3.2 before 3.2.24, 4.2 before 4.2.10, and 5.0 before 5.0.2.
Risk and impact
A potential denial-of-service (DoS) vulnerability in the intcomma template filter of Django allows attackers to cause application crashes by feeding very long strings to the filter. This could lead to service disruption or denial of service for affected applications.
Recommended action
Upgrade to versions 3.2.24, 4.2.10, or 5.0.2 to mitigate the vulnerability. Apply the patches provided in the advisory references.