Django multipartparser.py 拒绝服务漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nic.cczu.edu.cn/2023/0222/c11758a318048/page.htm
• https://xhnic.cumt.edu.cn/cf/95/c20548a642965/page.htm
• https://docs.djangoproject.com/zh-hans/6.0/releases/security/
• https://www.anquanke.com/post/id/315047
• https://avd.aliyun.com/detail?id=AVD-2023-24580
• https://www.sentinelone.com/vulnerability-database/cve-2023-24580/
• https://nvd.nist.gov/vuln/detail/cve-2022-23833
• https://security.snyk.io/package/pip/django/3.1.7
• https://www.miggo.io/vulnerability-database/cve/CVE-2026-33033
• https://www.venustech.com.cn/new_type/aqtg/20230217/25183.html
• https://github.com/advisories/GHSA-5mf9-h53q-7mhq
• https://docs.djangoproject.com/en/6.0/releases/security/
• https://www.sentinelone.com/vulnerability-database/cve-2022-23833/
• https://cve.circl.lu/cve/CVE-2022-23833
• https://security-tracker.debian.org/tracker/CVE-2022-23833
• https://news.qq.com/rain/a/20260204A0688M00

Related Vulnerabilities

• PoCCVE-2026-1207: Django RasterField - SQL Injection
• Django 需授权 SQL注入漏洞
• Django 未授权 SQL注入漏洞
• PoCCVE-2022-34265: Django - SQL injection
• PoCCVE-2017-12794: Django Debug Page - Cross-Site Scripting
• PoCCVE-2018-14574: Django - Open Redirect
• PoCCVE-2020-9402: Django SQL Injection
• PoCdjango-framework-exceptions: Django Framework Exceptions
• PoCdjango-secret-key: Django Secret Key Exposure
• PoCdjango-debug-exposure: Django Debug Exposure
• PoCdjango-debug-config-enabled: Django Debug Configuration Enabled