tocsin

PyPI/django CVE-2023-24580: unknown, EPSS 62.58%

An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f

Action: Upgrade django to 3.2.18 or later.

pip install django==3.2.18
pip install django==4.0.10
pip install django==4.1.7

Affected

introducedfixedlast affected
3.23.2.18-
4.04.0.10-
4.14.1.7-

Fixed versions

3.2.184.0.104.1.7

Sources

CVE-2023-24580 · published · modified · JSON