onyx

onyx --cves cve-2023-24580

CVE-2023-24580

HIGHDjango
score
<0.1
cvss
7.5
epss
62.6%
published
2023-02-15
kev added
—
first seen

Django 3.2 < 3.2.18, 4.0 < 4.0.10, and 4.1 < 4.1.7 contain a denial-of-service caused by excessive multipart form parts leading to resource exhaustion, letting attackers cause denial of service, exploit requires passing excessive parts to multipart forms.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2023-02-15 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 62.6%2026-09-23: epss 62.6%2026-09-24: epss 62.6%2026-09-25: epss 62.6%2026-09-26: epss 62.6%2026-09-27: epss 62.6%2026-09-28: epss 62.6%2026-09-29: epss 62.6%2026-09-30: epss 62.6%2026-10-01: epss 62.6%2026-10-02: epss 62.6%2026-10-03: epss 62.6%2026-10-04: epss 62.6%2026-10-05: epss 62.6%2026-10-06: epss 62.6%2026-10-07: epss 62.6%2026-10-08: epss 62.6%2026-10-09: epss 62.6%2026-10-10: epss 62.6%2026-10-11: epss 62.6%2026-10-12: epss 62.6%2026-10-13: epss 62.6%2026-10-14: epss 62.6%2026-10-15: epss 62.6%2026-10-16: epss 62.6%2026-10-18: epss 62.6%2026-10-19: epss 62.6%2026-10-20: epss 62.6%2026-10-21: epss 62.6%62.6%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-400

References 11