CVE-2022-23833
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart f...
Original description
The description as published by the source.
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
django
[{"type":"SEMVER","events":[{"introduced":"2.2.0"},{"fixed":"2.2.27"},{"introduced":"3.2.0"},{"fixed":"3.2.12"},{"introduced":"4.0.0"},{"fixed":"4.0.2"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-23833 python-django Fixed in: 2:2.2.28-1~deb11u1
References
- advisory lists.fedoraproject.org
- advisory security.netapp.com
- advisory debian.org
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- patch github.com
- patch github.com
- web docs.djangoproject.com
- web groups.google.com
- web djangoproject.com