Vulnerability CVE-2024-28865


Published: 2024-03-18   Modified: 2024-03-19

Description:
django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.

 References:
https://github.com/django-wiki/django-wiki/security/advisories/GHSA-wj85-w4f4-xh8h
https://github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88c

Copyright 2026, cxsecurity.com

 

Back to Top