16007 matches found
admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +158 more potentially affected by CVE-2023-31047 via django (>=3.2.0, <=3.2.18)
django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev23 and more Source cves: CVE-2023-31047 Source advisory: OSV:PYSEC-2023-61...
PYSEC-2023-61
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
djangodjangodjango (4.2.0a1) potentially affected by CVE-2023-31047 via django (4.2.0a1)
django PYPI version 4.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.0a1 Source cves: CVE-2023-31047 Source advisory: OSV:PYSEC-2023-61...
PYSEC-2023-61
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
Input validation
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
bfactory (>=0.4.0, <=0.4.4), coop (>=5.2.0, <=5.2.2) +39 more potentially affected by CVE-2023-31047 via django (4.2.0)
django PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - bfactory =0.4.0, =5.2.0, =3.1.0, =7.2.2, =39.1.0, =9.3.0, =0.1.0a1, =1.0.0, =0.2.1, =0.2.2 - django-handy-admin 0.0.0 and more Source cves:...
CVE-2023-31047
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
CVE-2023-31047
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +283 more potentially affected by CVE-2023-31047 via django (>=4.0.0a1, <=4.1.8)
django PYPI version =4.0.0a1, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.13.0 and more Source cves: CVE-2023-31047 Source advisory: MEND:CVE-2023-31047...
admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +159 more potentially affected by CVE-2023-31047 via django (>=3.2.0rc1, <=3.2.18)
django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev23 and more Source cves: CVE-2023-31047 Source advisory: MEND:CVE-2023-31047...
CVE-2023-31047: Improper Input Validation
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
CVE-2023-31047
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
CVE-2023-31047
CVE-2023-31047 affects Django: 3.2.x before 3.2.19, 4.x before 4.1.9, and 4.2.x before 4.2.1. The vulnerability allows bypassing validation when using a single form field to upload multiple files; forms.FileField/ImageField never validated earlier uploads, with only the last file being validated....
CVE-2023-31047
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
CVE-2023-31047
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
bfactory (>=0.4.0, <=0.4.4), coop (>=5.2.0, <=5.2.2) +39 more potentially affected by CVE-2023-31047 via django (>=4.2.0a1, <=4.2.0)
django PYPI version =4.2.0a1, =0.4.0, =5.2.0, =3.1.0, =7.2.2, =39.1.0, =9.3.0, =0.1.0a1, =1.0.0, =0.2.1, =0.2.2 - django-handy-admin 0.0.0 and more Source cves: CVE-2023-31047 Source advisory: MEND:CVE-2023-31047...
Debian dla-3415 : python-django - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3415 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3415-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 3415-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3415-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 05, 2023 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...
FreeBSD : Django -- multiple vulnerabilities (d55e1b4d-eadc-11ed-9cc0-080027de9982)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d55e1b4d-eadc-11ed-9cc0-080027de9982 advisory. - Django reports: CVE-2023-31047: Potential bypass of validation when uploading multiple files using on...