Fedora 37 : python-django3 (2023-8f9d949dbc)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8f9d949dbc advisory. - Update to latest 3.2 release - Security fix for CVE-2023-31047 - Provide python3-django so it can be used by dependents that do not use the...

Fedora: Security Advisory for python-django3 (FEDORA-2023-0d20d09f2d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : python-django3 (2023-0d20d09f2d)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0d20d09f2d advisory. - Update to latest 3.2 release - Security fix for CVE-2023-31047 - Provide python3-django so it can be used by dependents that do not use the...

Django 3.2.x < 3.2.19, 4.1.x < 4.1.9, 4.2.x < 4.2.1 Improper Input Validation Vulnerability - Linux

Django is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if...

Django 3.2.x < 3.2.19, 4.1.x < 4.1.9, 4.2.x < 4.2.1 Input Validation Vulnerability - Windows

Django is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if...

Debian: Security Advisory (DLA-3415-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +283 more potentially affected by CVE-2023-31047 via django (>=4.0.0a1, <=4.1.8)

django PYPI version =4.0.0a1, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.13.0 and more Source cves: CVE-2023-31047 Source advisory: OSV:GHSA-R3XC-PRGR-MG9P...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +283 more potentially affected by CVE-2023-31047 via django (>=4.0.0a1, <=4.1.8)

django PYPI version =4.0.0a1, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.13.0 and more Source cves: CVE-2023-31047 Source advisory: GHSA-R3XC-PRGR-MG9P...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +159 more potentially affected by CVE-2023-31047 via django (>=3.2.0rc1, <=3.2.18)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev23 and more Source cves: CVE-2023-31047 Source advisory: GHSA-R3XC-PRGR-MG9P...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +159 more potentially affected by CVE-2023-31047 via django (>=3.2.0rc1, <=3.2.18)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev23 and more Source cves: CVE-2023-31047 Source advisory: OSV:GHSA-R3XC-PRGR-MG9P...

Django bypasses validation when using one form field to upload multiple files

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

bfactory (>=0.4.0, <=0.4.4), coop (>=5.2.0, <=5.2.2) +39 more potentially affected by CVE-2023-31047 via django (>=4.2.0a1, <=4.2.0)

django PYPI version =4.2.0a1, =0.4.0, =5.2.0, =3.1.0, =7.2.2, =39.1.0, =9.3.0, =0.1.0a1, =1.0.0, =0.2.1, =0.2.2 - django-handy-admin 0.0.0 and more Source cves: CVE-2023-31047 Source advisory: OSV:GHSA-R3XC-PRGR-MG9P...

bfactory (>=0.4.0, <=0.4.4), coop (>=5.2.0, <=5.2.2) +39 more potentially affected by CVE-2023-31047 via django (>=4.2.0a1, <=4.2.0)

django PYPI version =4.2.0a1, =0.4.0, =5.2.0, =3.1.0, =7.2.2, =39.1.0, =9.3.0, =0.1.0a1, =1.0.0, =0.2.1, =0.2.2 - django-handy-admin 0.0.0 and more Source cves: CVE-2023-31047 Source advisory: GHSA-R3XC-PRGR-MG9P...

GHSA-R3XC-PRGR-MG9P Django bypasses validation when using one form field to upload multiple files

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

DEBIAN-CVE-2023-31047

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

djangodjangodjango (4.2.0b1), railguns (0.66.0) potentially affected by CVE-2023-31047 via django (4.2.0b1)

django PYPI version 4.2.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.0b1 - railguns 0.66.0 Source cves: CVE-2023-31047 Source advisory: OSV:PYSEC-2023-61...

djangodjangodjango (4.2.0rc1) potentially affected by CVE-2023-31047 via django (4.2.0rc1)

django PYPI version 4.2.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.0rc1 Source cves: CVE-2023-31047 Source advisory: OSV:PYSEC-2023-61...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +271 more potentially affected by CVE-2023-31047 via django (>=4.0.0, <=4.1.8)

django PYPI version =4.0.0, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.13.0 - annalist 0.5.18 and more Source cves: CVE-2023-31047 Source advisory: OSV:PYSEC-2023-61...

epay-nepal (0.1.0) potentially affected by CVE-2023-31047 via django (3.2.0rc1)

django PYPI version 3.2.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - epay-nepal 0.1.0 Source cves: CVE-2023-31047 Source advisory: OSV:PYSEC-2023-61...