Skip to content

CVE-2023-31047: Potential bypass of validation when uploading multiple files using one form field

Django changed the behaviour of fileinput to avoid the vulnerability. However, I don't know how to then create a widget for multiple files.

https://www.djangoproject.com/weblog/2023/may/03/security-releases/

See comments below for further information.

Relevant links:

https://github.com/advisories/GHSA-r3xc-prgr-mg9p

https://docs.djangoproject.com/en/3.2/topics/http/file-uploads/

Edited by Carlos Vega