VULNERABILITY INTELLIGENCE
CVE-2013-0306
CVSS score5 MEDIUM
EPSS probability2.60%
CISA KEVNot currently listed
Published2013-05-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.