Wind River Support Network

HomeDefectsLIN1021-2682
Fixed

LIN1021-2682 : Security Advisory - python-django - CVE-2022-23833

Created: Feb 1, 2022    Updated: Mar 27, 2022
Resolved Date: Mar 27, 2022
Found In Version: 10.21.20.1
Fix Version: 10.21.20.11
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.

https://nvd.nist.gov/vuln/detail/CVE-2022-23833

CVEs


Live chat
Online