Intrusion PreventionDjango.multipartparser.py.parse.DoS
Description
This indicates an attack attempt to exploit a Denial of Service Vulnerability in Django Software Foundation Django.
The vulnerability is due to resource exhaustion when parsing a large number of files in multipart/form-data requests. A remote attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could result in denial of service conditions on the target server.
Affected Products
Django Software Foundation Django 3.2 prior to 3.2.18
Django Software Foundation Django 4.0 prior to 4.0.10
Django Software Foundation Django 4.1 prior to 4.1.7
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.djangoproject.com/weblog/2023/feb/14/security-releases/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-06-26 | 24.589 | Sig Added |
| 2023-04-25 | 23.540 | Default_action:pass:drop |
| 2023-04-11 | 23.533 |
| ID | 52674 |
| Created | Feb 28, 2023 |
| Updated | Jun 23, 2023 |
| Risk |
|
| CVE ID | CVE-2023-24580 |
| Exploit Prediction Score | 0.36% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |