Improper input validation in Djangoproject Django

CVE-2012-3443

The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an image file.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.