An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Feb 3, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 3, 2022 |
| Centos_linux | — | Upgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-localeUpgrade rubygem-fast_gettextUpgrade rubygem-highlineUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-loggingUpgrade tfm-rubygem-unf_extUpgrade rubygem-hashieUpgrade rubygem-multi_jsonUpgrade rubygem-unicode-display_widthUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-typesUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-localeUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-domain_nameUpgrade rubygem-clampUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-powerbarUpgrade rubygem-oauthUpgrade rubygem-amazing_printUpgrade rubygem-mime-types-dataUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-netrcUpgrade satellite-cliUpgrade tfm-runtimeUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-clampUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-http-cookieUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-jwtUpgrade tfm-rubygem-mime-types-dataUpgrade satellite-cloneUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-amazing_print | Jul 14, 2022 | Feb 3, 2022 |
| Debian | — | Upgrade python-django | Feb 3, 2022 | Feb 3, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-display_widthUpgrade rubygem-amazing_printUpgrade rubygem-http-cookieUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-oauthUpgrade rubygem-localeUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-netrcUpgrade rubygem-unf_extUpgrade tfm-rubygem-unf_extUpgrade satellite-cliUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-runtimeUpgrade tfm-rubygem-http-cookieUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-mime-typesUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-unicode-debugsourceUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicodeUpgrade rubygem-oauthUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-powerbarUpgrade foreman-cliUpgrade tfm-rubygem-localeUpgrade rubygem-hammer_cliUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-mime-types-dataUpgrade rubygem-rest-clientUpgrade tfm-rubygem-clampUpgrade rubygem-loggingUpgrade rubygem-unfUpgrade tfm-rubygem-loggingUpgrade rubygem-jwtUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-netrcUpgrade rubygem-little-pluggerUpgrade rubygem-fast_gettextUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_execution | Jul 14, 2022 | Feb 3, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfo | Mar 12, 2024 | Feb 3, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Feb 3, 2022 |
| Ubuntu | — | Upgrade python-djangoUpgrade python3-djangoUpgrade python-django (Ubuntu Pro)Upgrade python3-django (Ubuntu Pro) | Feb 4, 2022 | Feb 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub