Lucene search
+L

7605 matches found

Mageia
Mageia
added 2023/05/16 7:17 p.m.48 views

Updated python-django packages fix security vulnerability

Passing certain inputs e.g., an excessive number of parts to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack. CVE-2023-24580 Bypass of validation when using one form field to upload multiple files. This...

9.8CVSS7.1AI score0.62575EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/05/16 12:00 a.m.27 views

Fedora 37 : python-django3 (2023-8f9d949dbc)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8f9d949dbc advisory. - Update to latest 3.2 release - Security fix for CVE-2023-31047 - Provide python3-django so it can be used by dependents that do not use the...

9.8CVSS7.1AI score0.01391EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/05/12 12:00 a.m.21 views

Fedora: Security Advisory for python-django3 (FEDORA-2023-0d20d09f2d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01391EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/05/11 12:00 a.m.43 views

Fedora 38 : python-django3 (2023-0d20d09f2d)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0d20d09f2d advisory. - Update to latest 3.2 release - Security fix for CVE-2023-31047 - Provide python3-django so it can be used by dependents that do not use the...

9.8CVSS7.1AI score0.01391EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/05/09 12:00 a.m.45 views

Django 3.2.x < 3.2.19, 4.1.x < 4.1.9, 4.2.x < 4.2.1 Improper Input Validation Vulnerability - Linux

Django is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if...

9.8CVSS9.5AI score0.01391EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/05/09 12:00 a.m.27 views

Django 3.2.x < 3.2.19, 4.1.x < 4.1.9, 4.2.x < 4.2.1 Input Validation Vulnerability - Windows

Django is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if...

9.8CVSS9.5AI score0.01391EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/05/08 12:00 a.m.22 views

Debian: Security Advisory (DLA-3415-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01391EPSS
SaveExploits0References3
OSV
OSV
added 2023/05/07 3:30 a.m.7 views

GHSA-R3XC-PRGR-MG9P Django bypasses validation when using one form field to upload multiple files

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS5.8AI score0.01391EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2023/05/07 3:30 a.m.250 views

Django bypasses validation when using one form field to upload multiple files

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS6.5AI score0.01391EPSS
SaveExploits0References12Affected Software1
NVD
NVD
added 2023/05/07 2:15 a.m.25 views

CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS9.5AI score0.01391EPSS
SaveExploits0References6
OSV
OSV
added 2023/05/07 2:15 a.m.1 views

DEBIAN-CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS6.8AI score0.01391EPSS
SaveExploits0References1
PyPA
PyPA
added 2023/05/07 2:15 a.m.9 views

PYSEC-2023-61

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS7.1AI score0.01391EPSS
SaveExploits0References6Affected Software1
Prion
Prion
added 2023/05/07 2:15 a.m.35 views

Input validation

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

7.5CVSS9.3AI score0.01391EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2023/05/07 2:15 a.m.10 views

PYSEC-2023-61

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS6.8AI score0.01391EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2023/05/07 12:00 a.m.6 views

CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.5AI score0.01391EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2023/05/07 12:00 a.m.39 views

CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS7.2AI score0.01391EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/05/07 12:00 a.m.70 views

CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.7AI score0.01391EPSS
SaveExploits0References6
OSV
OSV
added 2023/05/07 12:00 a.m.47 views

CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS7.2AI score
SaveExploits0References8
CVE
CVE
added 2023/05/07 12:00 a.m.325 views

CVE-2023-31047

CVE-2023-31047 affects Django: 3.2.x before 3.2.19, 4.x before 4.1.9, and 4.2.x before 4.2.1. The vulnerability allows bypassing validation when using a single form field to upload multiple files; forms.FileField/ImageField never validated earlier uploads, with only the last file being validated....

9.8CVSS9.3AI score0.01391EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/06 12:00 a.m.35 views

Debian dla-3415 : python-django - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3415 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3415-1 [email protected] https://www.debian.org/lts/security/...

9.8CVSS7AI score0.01391EPSS
SaveExploits0References4
Rows per page
Query Builder