CVE-2023-24580

CVE-2023-24580 is a denial-of-service vulnerability affecting Django versions 3.2.x prior to 3.2.18, 4.0.x prior to 4.0.10, and 4.1.x prior to 4.1.7. This flaw in the Multipart Request Parser allows an attacker to trigger excessive open files or memory exhaustion by submitting multipart forms with an unusually high number of parts. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network without authentication, leading to a complete denial of service. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.