Red Hat Security AdvisoryRHSA-2023:4591
RHUI 4.5.0 release - Security, Bug Fixes, and Enhancements
Released 2023-08-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHUI 4 for RHEL 8 python-django-3.2.19-1.0.1.el8ui, python-sqlparse-0.4.4-1.0.1.el8ui, python39-django-3.2.19-1.0.1.el8ui +1
Fixes 2 records
Priority MEDIUM 52
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01391 · Published 2023-05-07 · Fixed in 3.2.19, 4.1.9 +1 CWE-862
Priority LOW 35
sqlparse is a non-validating SQL parser module for Python.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0098 · Published 2023-04-18 · Partial fix · 0.4.4 CWE-1333
