Wind River Support Network

HomeDefectsLIN10-9682
Fixed

LIN10-9682 : Security Advisory - python-django - CVE-2022-23833

Created: Feb 1, 2022    Updated: Feb 22, 2022
Resolved Date: Feb 22, 2022
Found In Version: 10.17.41.1
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.

https://nvd.nist.gov/vuln/detail/CVE-2022-23833

CVEs


Live chat
Online