CVE-2023-24580 — Resource exhaustion in Django
CVE-2023-24580: Resource exhaustion in Django, discovered in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. The vulnerability allows for denial-of-service attacks via excessive multipart form inputs.
Risk and impact
The vulnerability allows attackers to cause resource exhaustion, leading to denial-of-service (DoS) attacks. This could disrupt services and compromise system stability.
Recommended action
Upgrade to Django 3.2.18, 4.0.10, or 4.1.7 to mitigate the vulnerability. Apply the patches provided in the advisory references.