Description

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.

Remediation

References

CVE-2022-23833

Related Vulnerabilities

WordPress Plugin Related Posts Unspecified Vulnerability (5.12.69)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3126)

WordPress Plugin WooCommerce OpenPOS SQL Injection (6.4.4)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41165)

Squid Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-28652)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-835 CVE-2022-23833