All vulnerabilities

Servers and applications

CVE-2024-39317

Wagtail is an open source content management system built on Django. A bug in Wagtail's `parse_query_string` would result in it taking a long time to process suitably crafted inputs. When used to parse sufficiently long strings of characters without a space, `parse_query_string` would take an unexpectedly large amount of time to process, resulting in a denial of service. In an initial Wagtail…

Severity
Medium 4.9
Published
11 Jul 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
5.2.6, 6.0.6, 6.1.3
Sources
NVD

Affected software

SoftwareAffected versions
WagtailServers and applications · cpe:a:torchbox:wagtail
  • From 2.0 before 5.2.6
  • From 6.0 before 6.0.6
  • From 6.1 before 6.1.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-39317
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-39317