Vulnetix
Try Vulnetix Request Demo
CVE-2023-31047 PUBLISHED

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's "Uploading multiple files" documentation suggested otherwise.

EPSS 0.12% · 31.3th percentile

Risk Scores

EPSS Score
0.12%
31.3th percentile

Affected Products

VendorProductVersions
Bitnamidjango4.2.0, 4.2.0, 3.2.0
Bitnamidjango4.0.0, 4.2.0, 3.2.0

Timeline

References

Open in Interactive Console →