CVE-2025-24370: 
Python vulnerability analysis and mitigation

Django-Unicorn, a library that adds modern reactive component functionality to Django templates, was found to contain a critical python class pollution vulnerability (CVE-2025-24370). The vulnerability exists in the core functionality set_property_value, which can be remotely triggered by users through crafted component requests. The issue affects versions prior to 0.62.0 and was disclosed on February 3, 2025 (GitHub Advisory).

The vulnerability stems from the set_property_value function in django_unicorn/views/action_parsers/utils.py, which allows remote users to manipulate property values through component requests. The function fails to properly validate property paths, enabling attackers to traverse to other objects in the Python runtime using magic attributes. For example, by setting the property_name to __init__.__globals__, attackers can modify global context objects of the component module, including imported modules in the dependency chain (GitHub Advisory).

The vulnerability has severe implications, enabling at least five different exploitation methods that can result in Cross-Site Scripting (XSS), Denial of Service (DoS), and Authentication Bypass attacks in Django-Unicorn-based applications. Attackers can modify any global objects including variables, instances, classes, and functions of any module in the dependency chain (GitHub Advisory, NVD).

The vulnerability is highly exploitable through multiple attack vectors. Five specific exploitation methods have been identified: 1) Reflected XSS by overwriting bs4 HTML sanitizer, 2) Stored XSS by overwriting Unicorn Setting and Django Json Script Sanitizer, 3) Stored XSS by overwriting Django Error Page Source Code, 4) Authentication Bypass by overwriting Django Secret Key, and 5) Denial of Service by overwriting timed Decorator Method (GitHub Advisory).

The vulnerability has been patched in version 0.62.0. The fix includes blocking paths that start with __ (double under/dunder) which represent magic variables/methods, and implementing a blacklist for restricted paths such as globals and builtins. There are no known workarounds for this vulnerability, and all users are advised to upgrade to version 0.62.0 (GitHub Advisory, NVD).