Re: Demonstration of patching against CVE-2023-31047

2023-06-13 Thread 5t00
glegroups.com on behalf > of optimusprime fig > *Sent:* Monday, June 12, 2023 4:15:33 PM > *To:* django...@googlegroups.com > *Subject:* Re: Demonstration of patching against CVE-2023-31047 > > Thank you! I have tried patching to 4.2.1 which disallows the multiple to > be

Re: Demonstration of patching against CVE-2023-31047

2023-06-12 Thread Lucifer Black
ay, June 12, 2023 4:15:33 PM To: django-users@googlegroups.com Subject: Re: Demonstration of patching against CVE-2023-31047 Thank you! I have tried patching to 4.2.1 which disallows the multiple to be set as True on the form widget. However, I have struggled to get a working implementation up t

Re: Demonstration of patching against CVE-2023-31047

2023-06-12 Thread optimusprime fig
Thank you! I have tried patching to 4.2.1 which disallows the multiple to be set as True on the form widget. However, I have struggled to get a working implementation up that allows multiple images of a certain file type only to be uploaded. I am now able to accidentally allow all file types up eve

Re: Demonstration of patching against CVE-2023-31047

2023-06-12 Thread Sebastian Jung
Use django >= 4.2.1 https://security.snyk.io/vuln/SNYK-UBUNTU2204-PYTHONDJANGO-5492023 5t00 schrieb am Mo., 12. Juni 2023, 20:32: > Hi all, > > I am new to Django and am looking to demonstrate how the application of a > Django patch can prevent against multiple file uploads in light of the > r