CVE-2022-23833
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart f...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
django
[{"type":"SEMVER","events":[{"introduced":"2.2.0"},{"fixed":"2.2.27"},{"introduced":"3.2.0"},{"fixed":"3.2.12"},{"introduced":"4.0.0"},{"fixed":"4.0.2"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-23833 python-django Corrigé dans: 2:2.2.28-1~deb11u1
Références
- advisory lists.fedoraproject.org
- advisory security.netapp.com
- advisory debian.org
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- patch github.com
- patch github.com
- web docs.djangoproject.com
- web groups.google.com
- web djangoproject.com