Django · Django · CVE-2022-23833
**Name of the Vulnerable Software and Affected Versions**
Django versions 2.2 before 2.2.27
Django versions 3.2 before 3.2.12
Django versions 4.0 before 4.0.2
**Description**
An issue was discovered in MultiPartParser. Passing certain inputs to multipart forms could result in an infinite loop when parsing files. This could allow a remote attacker to perform a denial of service.
**Recommendations**
For Django versions 2.2 before 2.2.27, update to version 2.2.27 or later.
For Django versions 3.2 before 3.2.12, update to version 3.2.12 or later.
For Django versions 4.0 before 4.0.2, update to version 4.0.2 or later.