Wind River Support Network

HomeDefectsLIN1021-5741

Fixed

LIN1021-5741 : Security Advisory - python-django - CVE-2023-31047

Created: May 5, 2023 Updated: May 26, 2025

Resolved Date: May 21, 2025

Found In Version: 10.21.20.1

Fix Version: 10.21.20.25

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's "Uploading multiple files" documentation suggested otherwise.

https://nvd.nist.gov/vuln/detail/CVE-2023-31047

CVEs

CVE-2023-31047