Lucene search
+L

3 matches found

OSV
OSV
added 2023/05/19 11:5 a.m.3 views

OESA-2023-1286 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has...

9.8CVSS7.1AI score0.0138EPSS
SaveExploits0References2
PyPA
PyPA
added 2023/05/07 2:15 a.m.8 views

PYSEC-2023-61

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...

9.8CVSS7.1AI score0.0138EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.39 views

openSUSE Security Update : php5 (openSUSE-SU-2012:0551-1)

Scripts that accept multiple file uploads in a single request were potentially vulnerable to a directory traversal attack %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-244. The...

5.8CVSS9.4AI score0.06365EPSS
SaveExploits2References3
Rows per page
Query Builder