Lucene search

PRIOn knowledge basePRION:CVE-2022-23833

HistoryFeb 03, 2022 - 2:15 a.m.

Design/Logic Flaw

2022-02-0302:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.3%

JSON

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.

CPENameOperatorVersion
debian_linuxeq11.0
djangoge3.2
djangolt3.2.12
djangoge4.0
djangolt4.0.2
djangoge2.2
djangolt2.2.27
fedoraeq34
fedoraeq35

Name	Operator	Version
debian_linux	eq	11.0
django	ge	3.2
django	lt	3.2.12
django	ge	4.0
django	lt	4.0.2
django	ge	2.2
django	lt	2.2.27
fedora	eq	34
fedora	eq	35

References

docs.djangoproject.com/en/4.0/releases/security/

github.com/django/django/commit/c477b761804984c932704554ad35f78a2e230c6a

github.com/django/django/commit/d16133568ef9c9b42cb7a08bdf9ff3feec2e5468

github.com/django/django/commit/f9c7d48fdd6f198a6494a9202f90242f176e4fc9

groups.google.com/forum/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/

security.netapp.com/advisory/ntap-20220221-0003/

www.debian.org/security/2022/dsa-5254

www.djangoproject.com/weblog/2022/feb/01/security-releases/