Skip to content
OpenAdvisories
High USN-5868-1 1 CVE

python-django vulnerability

Published Feb 14, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Jakob Ackermann discovered that Django incorrectly handled certain file
uploads. A remote attacker could possibly use this issue to cause Django to
consume resources, leading to a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS python-django 1:1.11.11-1ubuntu1.20
Ubuntu · 20.04 LTS 20.04:LTS python-django 2:2.2.12-1ubuntu0.16
Ubuntu · 22.04 LTS 22.04:LTS python-django 2:3.2.12-2ubuntu1.5

Vulnerabilities 1

  • High 7.5
    CVE-2023-24580 EPSS 63%

    Resource exhaustion in Django

    An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhausti…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2023-24580