CVE-2010-4535

CVE-2010-4535 describes a denial-of-service vulnerability in the password reset functionality of django.contrib.auth, affecting Django versions before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1. The flaw stems from insufficient validation of base36 timestamp string length, allowing remote attackers to trigger resource exhaustion by submitting excessively long base36 integers in a URL. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P), this vulnerability is easily exploitable over the network with low attack complexity, leading to a partial denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.