CVE-2022-23833

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2

published February 3, 2022

CVSS
—
EPSS
50%
Percentile
98.9
In the wild
Unconfirmed
What it is

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.49527 · 98.9th percentile
Published
2022-02-03T00:00Z
EPSS history
Timeline
  • 03 FEB 00:00Z
    An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2
    cvelistv5