Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Django Improper Input Validation Vulnerability - CVE-2023-31047 - Vulnerability Database
Django

Django Improper Input Validation Vulnerability - CVE-2023-31047

Critical
Reference: CVE-2023-31047
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-31047
Title: Django Improper Input Validation Vulnerability
Overview:

In Django 3.2 before 3.2.19 4.x before 4.1.9 and 4.2 before 4.2.1 it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However Django39s quotUploading multiple filesquot documentation suggested otherwise.