PT-2023-24202 · Unknown · Django-Ses

Name of the Vulnerable Software and Affected Versions: Django-SES versions prior to 3.5.0 Description: The django ses library, a mail backend for Django using AWS Simple Email Service, has a flaw in the verification of signed requests from AWS. The SESEventWebhookView class is intended to handle...

PT-2023-23961

Name of the Vulnerable Software and Affected Versions Kiwi TCMS versions prior to 12.3 Description The issue arises from insufficient upload validation checks in Kiwi TCMS, allowing an attacker to upload potentially dangerous files. These files can be combined to circumvent the existing...

Malicious code in print-django (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 078a5d3998b66f598078a8a6af58420b3dc0685a8c48e4e4b4fb7856496c5a24 The OpenSSF Package Analysis project identified 'print-django' @ 3.9.10 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1387 Malicious code in print-django (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 078a5d3998b66f598078a8a6af58420b3dc0685a8c48e4e4b4fb7856496c5a24 The OpenSSF Package Analysis project identified 'print-django' @ 3.9.10 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1362 Malicious code in django-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b95436e2a145afcd7f459f6101c1d1b699d4d5842126d920fe77f700c8899b The OpenSSF Package Analysis project identified 'django-pyyaml' @ 20.17.15 pypi as malicious. It is considered malicious because: - The package...

Malicious code in django-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b95436e2a145afcd7f459f6101c1d1b699d4d5842126d920fe77f700c8899b The OpenSSF Package Analysis project identified 'django-pyyaml' @ 20.17.15 pypi as malicious. It is considered malicious because: - The package...

SUSE CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

OESA-2023-1286 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has...

Mageia: Security Advisory (MGASA-2023-0165)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2023-0165 Updated python-django packages fix security vulnerability

Passing certain inputs e.g., an excessive number of parts to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack. CVE-2023-24580 Bypass of validation when using one form field to upload multiple files. This...

Updated python-django packages fix security vulnerability

Passing certain inputs e.g., an excessive number of parts to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack. CVE-2023-24580 Bypass of validation when using one form field to upload multiple files. This...

Fedora 37 : python-django3 (2023-8f9d949dbc)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8f9d949dbc advisory. - Update to latest 3.2 release - Security fix for CVE-2023-31047 - Provide python3-django so it can be used by dependents that do not use the...

Fedora: Security Advisory for python-django3 (FEDORA-2023-0d20d09f2d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : python-django3 (2023-0d20d09f2d)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0d20d09f2d advisory. - Update to latest 3.2 release - Security fix for CVE-2023-31047 - Provide python3-django so it can be used by dependents that do not use the...

Django 3.2.x < 3.2.19, 4.1.x < 4.1.9, 4.2.x < 4.2.1 Improper Input Validation Vulnerability - Linux

Django is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if...

Django 3.2.x < 3.2.19, 4.1.x < 4.1.9, 4.2.x < 4.2.1 Input Validation Vulnerability - Windows

Django is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if...

Debian: Security Advisory (DLA-3415-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-R3XC-PRGR-MG9P Django bypasses validation when using one form field to upload multiple files

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

Django bypasses validation when using one form field to upload multiple files

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...