EUVD-2022-0090

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Issue in Django MultiPartParser allows infinite loop with specific multipart form inputs

Reporter	Title	Published	Views	Family All 142
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.12-alt1	25 Feb 202200:00	–	altlinux
ATTACKERKB	CVE-2022-23833	3 Feb 202202:15	–	attackerkb
AlpineLinux	CVE-2022-23833	3 Feb 202200:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
Circl	CVE-2022-23833	3 Feb 202207:29	–	circl
CNNVD	Django 代码问题漏洞	1 Feb 202200:00	–	cnnvd
CNVD	Django code issue vulnerability (CNVD-2022-31854)	10 Feb 202200:00	–	cnvd
CVE	CVE-2022-23833	3 Feb 202200:00	–	cve
Cvelist	CVE-2022-23833	3 Feb 202200:00	–	cvelist
Debian	[SECURITY] [DLA 2906-1] python-django security update	1 Feb 202218:29	–	debian

[
  {
    "enisaIdVendor": [
      {
        "id": "7aa95a8d-1950-3a4d-8436-fb4baaddc5e3",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "bbc2e716-5ba6-3e38-aaa6-b4458d5e077e",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
docs	www.docs.djangoproject.com/en/4.0/releases/security/
djangoproject	www.djangoproject.com/weblog/2022/feb/01/security-releases/
groups	www.groups.google.com/forum/
github	www.github.com/advisories/GHSA-6cw3-g6wv-c2xv
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23833
github	www.github.com/django/django/commit/c477b761804984c932704554ad35f78a2e230c6a
github	www.github.com/django/django/commit/d16133568ef9c9b42cb7a08bdf9ff3feec2e5468
github	www.github.com/django/django/commit/f9c7d48fdd6f198a6494a9202f90242f176e4fc9
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2022-20.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV

03 Oct 2025 20:07Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

CVSS 25

EPSS0.01058