USN-6054-1: Django vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2023-31047
• https://ubuntu.com/security/notices/USN-6054-2
• https://launchpad.net/ubuntu/+source/python-django/3:3.2.18-1ubuntu0.1
• https://launchpad.net/ubuntu/+source/python-django/3:3.2.15-1ubuntu1.3
• https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.6
• https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.17
• https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.21
• https://ubuntu.com/security/notices/USN-6054-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2023-31047

Frequently Asked Questions

• What is the vulnerability ID for this Django vulnerability?

  The vulnerability ID is USN-6054-1.

• What type of vulnerability is the Django vulnerability?

  The Django vulnerability is related to uploading multiple files using one form field.

• How can a remote attacker exploit the Django vulnerability?

  A remote attacker could possibly bypass certain validations using this vulnerability.

• Which versions of Python-Django are affected by the vulnerability?

  The vulnerability affects versions 3:3.2.18-1ubuntu0.1, 3:3.2.15-1ubuntu1.3, 2:3.2.12-2ubuntu1.6, 2:2.2.12-1ubuntu0.17, and 1:1.11.11-1ubuntu1.21 of Python-Django.

• How do I fix the Django vulnerability?

  You can fix the vulnerability by updating the python3-django package to version 3:3.2.18-1ubuntu0.1 or higher.