The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9c9ee9a6-ac5e-11ed-9323-080027d3a315 advisory.

  - Django reports: CVE-2023-24580: Potential denial-of-service vulnerability in file uploads.
    (CVE-2023-24580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0075-1 advisory.

  - An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10,     and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could     result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-     service attack. (CVE-2023-24580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000165 advisory.

    An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10,     and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could     result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-     service attack.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5868-1 advisory.

    Jakob Ackermann discovered that Django incorrectly handled certain file uploads. A remote attacker could     possibly use this issue to cause Django to consume resources, leading to a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3d775d93be advisory.

    Security fixes for CVE-2022-24580 and CVE-2023-41323

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202509-03 (Django: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Django. Please review the CVE identifiers referenced     below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
171434	FreeBSD : Django -- multiple vulnerabilities (9c9ee9a6-ac5e-11ed-9323-080027d3a315)	Nessus	FreeBSD Local Security Checks	2/14/2023	2/24/2023	high
172569	openSUSE 15 Security Update : python-Django (openSUSE-SU-2023:0075-1)	Nessus	SuSE Local Security Checks	3/15/2023	3/15/2023	high
282136	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-000165)	Nessus	Unity Linux Local Security Checks	1/7/2026	1/7/2026	high
171472	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Django vulnerability (USN-5868-1)	Nessus	Ubuntu Local Security Checks	2/15/2023	8/27/2024	high
172107	Fedora 36 : python-django3 (2023-3d775d93be)	Nessus	Fedora Local Security Checks	3/5/2023	9/24/2025	high
265369	GLSA-202509-03 : Django: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	9/18/2025	9/18/2025	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

critical