CVE-2024-39317

Wagtail is an open source content management system built on Django. A bug in Wagtail's `parse_query_string` would result in it taking a long time to process suitably crafted inputs. When used to parse sufficiently long strings of characters without a space, `parse_query_string` would take an unexpectedly large amount of time to process, resulting in a denial of service. In an initial Wagtail installation, the vulnerability can be exploited by any Wagtail admin user. It cannot be exploited by end users. If your Wagtail site has a custom search implementation which uses `parse_query_string`, it may be exploitable by other users (e.g. unauthenticated users). Patched versions have been released as Wagtail 5.2.6, 6.0.6 and 6.1.3.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/wagtail/wagtail/commit/31b1e8532dfb1b70d8d37d22aff9cbde9109cdf2	Patch
https://github.com/wagtail/wagtail/commit/3c941136f79c48446e3858df46e5b668d7f83797	Patch
https://github.com/wagtail/wagtail/commit/b783c096b6d4fd2cfc05f9137a0be288850e99a2	Patch
https://github.com/wagtail/wagtail/security/advisories/GHSA-jmp3-39vp-fwg8	Third Party Advisory
https://github.com/wagtail/wagtail/commit/31b1e8532dfb1b70d8d37d22aff9cbde9109cdf2	Patch
https://github.com/wagtail/wagtail/commit/3c941136f79c48446e3858df46e5b668d7f83797	Patch
https://github.com/wagtail/wagtail/commit/b783c096b6d4fd2cfc05f9137a0be288850e99a2	Patch
https://github.com/wagtail/wagtail/security/advisories/GHSA-jmp3-39vp-fwg8	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:wagtail:wagtail::::::::
	cpe:2.3:a:wagtail:wagtail::::::::
	cpe:2.3:a:wagtail:wagtail::::::::

History

No history.

Information

Published : 2024-07-11 16:15

Updated : 2024-11-21 09:27

NVD link : CVE-2024-39317

Mitre link : CVE-2024-39317

CVE.ORG link : CVE-2024-39317

JSON object : View

Products Affected

wagtail

wagtail

CWE

CWE-1333

Inefficient Regular Expression Complexity

{"id": "CVE-2024-39317", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2024-07-11T16:15:02.477", "references": [{"url": "https://github.com/wagtail/wagtail/commit/31b1e8532dfb1b70d8d37d22aff9cbde9109cdf2", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/wagtail/wagtail/commit/3c941136f79c48446e3858df46e5b668d7f83797", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/wagtail/wagtail/commit/b783c096b6d4fd2cfc05f9137a0be288850e99a2", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/wagtail/wagtail/security/advisories/GHSA-jmp3-39vp-fwg8", "tags": ["Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/wagtail/wagtail/commit/31b1e8532dfb1b70d8d37d22aff9cbde9109cdf2", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/wagtail/wagtail/commit/3c941136f79c48446e3858df46e5b668d7f83797", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/wagtail/wagtail/commit/b783c096b6d4fd2cfc05f9137a0be288850e99a2", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/wagtail/wagtail/security/advisories/GHSA-jmp3-39vp-fwg8", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-1333"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1333"}]}], "descriptions": [{"lang": "en", "value": "Wagtail is an open source content management system built on Django. A bug in Wagtail's `parse_query_string` would result in it taking a long time to process suitably crafted inputs. When used to parse sufficiently long strings of characters without a space, `parse_query_string` would take an unexpectedly large amount of time to process, resulting in a denial of service. In an initial Wagtail installation, the vulnerability can be exploited by any Wagtail admin user. It cannot be exploited by end users. If your Wagtail site has a custom search implementation which uses `parse_query_string`, it may be exploitable by other users (e.g. unauthenticated users). Patched versions have been released as Wagtail 5.2.6, 6.0.6 and 6.1.3.\n"}, {"lang": "es", "value": "Wagtail es un sistema de gesti\u00f3n de contenidos de c\u00f3digo abierto construido sobre Django. Un error en `parse_query_string` de Wagtail provocar\u00eda que se tardara mucho en procesar las entradas adecuadamente manipuladas. Cuando se utiliza para analizar cadenas de caracteres suficientemente largas sin espacios, `parse_query_string` tardar\u00eda una cantidad de tiempo inesperadamente grande en procesarse, lo que provocar\u00eda una denegaci\u00f3n de servicio. En una instalaci\u00f3n inicial de Wagtail, cualquier usuario administrador de Wagtail puede aprovechar la vulnerabilidad. No puede ser explotado por los usuarios finales. Si su sitio Wagtail tiene una implementaci\u00f3n de b\u00fasqueda personalizada que utiliza `parse_query_string`, otros usuarios pueden explotarla (por ejemplo, usuarios no autenticados). Se han lanzado versiones parcheadas como Wagtail 5.2.6, 6.0.6 y 6.1.3."}], "lastModified": "2024-11-21T09:27:26.850", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wagtail:wagtail:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63385A72-B89E-40A2-B40A-1C0096FFF6F6", "versionEndExcluding": "5.2.6", "versionStartIncluding": "2.0"}, {"criteria": "cpe:2.3:a:wagtail:wagtail:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50A5F9B8-672B-490E-8913-52942C46923F", "versionEndExcluding": "6.0.6", "versionStartIncluding": "6.0"}, {"criteria": "cpe:2.3:a:wagtail:wagtail:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B9D477D-F71B-413C-8F29-963E6FAD5E95", "versionEndExcluding": "6.1.3", "versionStartIncluding": "6.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}