VDB
PYSEC-2022-20
PYSEC-2022-20
PUBLISHED
CVSS 8.699999809265137 HIGH
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.
Risk Scores
CVSS v4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PyPI | django | 2.2, 4.0, 2.2 |
Timeline
- Feb 3, 2022 CVE Published
- Dec 6, 2023 CVE Updated