An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Feb 15, 2023 |
| Centos_linux | — | Upgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-loggingUpgrade rubygem-powerbarUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-http-cookieUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-cliUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicode-display_widthUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicode-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-maintainUpgrade rubygem-multi_jsonUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-netrcUpgrade rubygem-http-acceptUpgrade rubygem-ffi-debugsourceUpgrade rubygem-gssapiUpgrade foreman-cliUpgrade rubygem-snaky_hashUpgrade rubygem-hashieUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-oauthUpgrade rubygem-fast_gettextUpgrade rubygem-localeUpgrade rubygem-jwtUpgrade rubygem-rest-clientUpgrade rubygem-amazing_printUpgrade rubygem-version_gemUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade rubygem-foreman_maintainUpgrade rubygem-clampUpgrade rubygem-highlineUpgrade rubygem-hammer_cli | May 4, 2023 | Feb 15, 2023 |
| Debian | — | Upgrade python-django | Feb 22, 2023 | Feb 15, 2023 |
| Freebsd | — | Upgrade py38-django32Upgrade py39-django40Upgrade py37-django32Upgrade py310-django40Upgrade py310-django32Upgrade py39-django41Upgrade py310-django41Upgrade py39-django32Upgrade py38-django41Upgrade py38-django40 | Feb 15, 2023 | Feb 14, 2023 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-debuginfoUpgrade satellite-cloneUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-debugsourceUpgrade rubygem-gssapiUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-loggingUpgrade rubygem-localeUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-oauth-ttyUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-multi_jsonUpgrade rubygem-unicodeUpgrade rubygem-amazing_printUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debugsourceUpgrade rubygem-netrcUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade rubygem-rest-clientUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-domain_nameUpgrade rubygem-ffiUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-highlineUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-version_gemUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade rubygem-oauthUpgrade rubygem-clampUpgrade python39-pulp_manifestUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_admin | May 4, 2023 | Feb 15, 2023 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Feb 15, 2023 |
| Suse | — | Upgrade python3-djangoUpgrade python3-Django1 | Mar 1, 2023 | Feb 15, 2023 |
| Ubuntu | — | Upgrade python-djangoUpgrade python3-django | Mar 22, 2023 | Feb 15, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub