An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Feb 3, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 3, 2022 |
| Centos_linux | — | Upgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-fast_gettextUpgrade rubygem-highlineUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unicode-display_widthUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hashieUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-clampUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicodeUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-jwtUpgrade rubygem-amazing_printUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade foreman-cliUpgrade rubygem-powerbarUpgrade rubygem-oauthUpgrade satellite-cliUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-little-pluggerUpgrade rubygem-rest-clientUpgrade rubygem-foreman_maintainUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-runtimeUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-unicodeUpgrade rubygem-jwtUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-debuginfoUpgrade satellite-cloneUpgrade rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-amazing_print | Jul 14, 2022 | Feb 3, 2022 |
| Debian | — | Upgrade python-django | Feb 3, 2022 | Feb 3, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-unf_extUpgrade rubygem-unf_extUpgrade tfm-rubygem-netrcUpgrade rubygem-multi_jsonUpgrade rubygem-amazing_printUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unicodeUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-http-cookieUpgrade tfm-runtimeUpgrade rubygem-unicode-display_widthUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-http-cookieUpgrade rubygem-mime-typesUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-little-pluggerUpgrade rubygem-unfUpgrade rubygem-loggingUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-jwtUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade foreman-cliUpgrade rubygem-rest-clientUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-mime-types-dataUpgrade rubygem-fast_gettextUpgrade satellite-maintainUpgrade rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-unicode-debugsourceUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicodeUpgrade tfm-rubygem-locale | Jul 14, 2022 | Feb 3, 2022 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfo | Mar 12, 2024 | Feb 3, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Feb 3, 2022 |
| Ubuntu | — | Upgrade python-djangoUpgrade python-django (Ubuntu Pro)Upgrade python3-djangoUpgrade python3-django (Ubuntu Pro) | Feb 4, 2022 | Feb 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub