{
  "cveId": "CVE-2023-24580",
  "url": "https://patchblox.com/security/cve/CVE-2023-24580",
  "summary": "CVE-2023-24580 is fixed in 3 products on 1 platform, first by python-django 1:1.11.11-1ubuntu1.20, released February 14, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "python3-django: An issue was discovered in the Multipart Request Parser in Django 3.2before 3.2.18, 4.0 before 4.0.10, and 4.1 before...",
  "description": "An issue was discovered in the Multipart Request Parser in Django 3.2before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certaininputs (e.g., an excessive number of parts) to multipart forms could resultin too many open files or memory exhaustion, and provided a potentialvector for a denial-of-service attack.",
  "published": "2023-02-14T01:00:00Z",
  "severity": "Medium",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.62575,
  "epssPercentile": 0.99195,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "python-django",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "3:3.2.18-1",
      "fix": "DEBIAN-CVE-2023-24580",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-24580",
      "released": "2023-02-15T01:15:10Z"
    },
    {
      "platform": "linux",
      "product": "python-django",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3:3.2.18-1",
      "fix": "DEBIAN-CVE-2023-24580",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-24580",
      "released": "2023-02-15T01:15:10Z"
    },
    {
      "platform": "linux",
      "product": "python-django",
      "release": "Debian 14",
      "fixedVersion": "3:3.2.18-1",
      "fix": "DEBIAN-CVE-2023-24580",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-24580",
      "released": "2023-02-15T01:15:10Z"
    },
    {
      "platform": "linux",
      "product": "python-django",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:1.11.11-1ubuntu1.20",
      "fix": "python-django 1:1.11.11-1ubuntu1.20",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-django-1-1.11.11-1ubuntu1.20",
      "released": "2023-02-14T01:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-django-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:1.11.11-1ubuntu1.20",
      "fix": "python-django-common 1:1.11.11-1ubuntu1.20",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-django-common-1-1.11.11-1ubuntu1.20",
      "released": "2023-02-14T01:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-django",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:1.11.11-1ubuntu1.20",
      "fix": "python3-django 1:1.11.11-1ubuntu1.20",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python3-django-1-1.11.11-1ubuntu1.20",
      "released": "2023-02-14T01:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-django",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:2.2.12-1ubuntu0.16",
      "fix": "python3-django 2:2.2.12-1ubuntu0.16",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python3-django-2-2.2.12-1ubuntu0.16",
      "released": "2023-02-14T01:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-django",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2:3.2.12-2ubuntu1.5",
      "fix": "python3-django 2:3.2.12-2ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-django-2-3.2.12-2ubuntu1.5",
      "released": "2023-02-14T01:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-django",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "3:3.2.18-1",
      "fix": "python3-django 3:3.2.18-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-python3-django-3-3.2.18-1",
      "released": "2026-01-16T01:42:23Z"
    },
    {
      "platform": "linux",
      "product": "python3-django",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "3:3.2.18-1",
      "fix": "python3-django 3:3.2.18-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-python3-django-3-3.2.18-1",
      "released": "2026-01-16T01:42:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}