PT-2022-1457 · Django+6 · Django+6
Alan Ryan
·
Published
2022-02-01
·
Updated
2026-01-03
·
CVE-2022-23833
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Django versions 2.2 before 2.2.27
Django versions 3.2 before 3.2.12
Django versions 4.0 before 4.0.2
Description
An issue was discovered in MultiPartParser. Passing certain inputs to multipart forms could result in an infinite loop when parsing files. This could allow a remote attacker to perform a denial of service.
Recommendations
For Django versions 2.2 before 2.2.27, update to version 2.2.27 or later.
For Django versions 3.2 before 3.2.12, update to version 3.2.12 or later.
For Django versions 4.0 before 4.0.2, update to version 4.0.2 or later.
Fix
DoS
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Django
Linuxmint
Red Os
Rocky Linux
Ubuntu