Description
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.
Remediation
References
Related Vulnerabilities
IBM RTC Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-1753)
MySQL CVE-2013-3839 Vulnerability (CVE-2013-3839)
Oracle JRE CVE-2013-2448 Vulnerability (CVE-2013-2448)
Oracle Database Server CVE-2014-4245 Vulnerability (CVE-2014-4245)
WordPress Plugin Nmedia WordPress Member Conversation 'doupload.php' Arbitrary File Upload (1.3)