CVE-2024-24680

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-246819.8An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA version before 1.2).CVE-2024-246836.5Improper Input Validation vulnerability in Apache Hop Engine.This issue affects Apache Hop Engine: before 2.8.0. Users are recommended to uCVE-2024-246847.8Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can CVE-2024-246857.8Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can CVE-2024-246867.8Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can CVE-2024-24697.2An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution. This vulnerability CVE-2024-246906.5Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.CVE-2024-246919.8Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unaCVE-2024-246924.7Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial CVE-2024-246935.5Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct CVE-2024-246947.8Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user toCVE-2024-246956.5Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an aut
CVE-2024-24680: High severity, CVSS 7.5 | Vulnix