Wind River Support Network

HomeDefectsLIN1019-7855
Fixed

LIN1019-7855 : Security Advisory - python-django - CVE-2022-23833

Created: Feb 1, 2022    Updated: Mar 28, 2022
Resolved Date: Feb 24, 2022
Found In Version: 10.19.45.1
Fix Version: 10.19.45.22
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.

https://nvd.nist.gov/vuln/detail/CVE-2022-23833

CVEs


Live chat
Online