Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
added 2023/10/19 1:15 p.m.5 views

python-django: Potential bypass of validation when uploading multiple files using one form field

A bypass of validation flaw was found in python-django. When uploading multiple files using one form field, an attacker could upload multiple files without validation due to the server only validating the last file uploaded...

9.8CVSS7.1AI score0.01391EPSS
SaveExploits0References5
OSV
OSV
added 2023/05/07 2:15 a.m.9 views

PYSEC-2023-61

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS6.8AI score0.01391EPSS
SaveExploits0References6
Rows per page
Query Builder