---

CVE-2018-7536 - log back

CVE-2018-7536 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Remote
Type	+ Denial of service
Description	+ The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions. The urlize() function is used to implement the urlize and urlizetrunc template filters, which were thus vulnerable. The problematic regular expressions are replaced with parsing logic that behaves similarly.
References	+ https://docs.djangoproject.com/en/dev/releases/1.11.11/ + https://github.com/django/django/commit/8618271caa0b09daba39ff3b46567d33ae1e1d3a
Notes