CVE-2023-31047

2 advisories.

PyPI/django CVE-2023-31047: critical 9.8, EPSS 1.39%

Django bypasses validation when using one form field to upload multiple files

Action: Upgrade django to 3.2.19 or later.

pip install django==3.2.19

pip install django==4.1.9

pip install django==4.2.1

Affected

introduced	fixed	last affected
3.2a1	3.2.19	-
4.0a1	4.1.9	-
4.2a1	4.2.1	-

Fixed versions

3.2.19

4.1.9

4.2.1

Sources

CVE-2023-31047 · published 2023-05-07T03:30:17Z · modified 2025-02-21T05:31:37.748535Z · JSON

PyPI/django CVE-2023-31047: unknown, EPSS 1.39%

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been suppor