Path Traversal in Django

🗓️ 10 Jun 2021 17:21:00Reported by GitHub Advisory DatabaseType

Path Traversal in Django versions before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 allows staff members to check arbitrary file existence and contents via TemplateDetailView vie

Reporter	Title	Published	Views	Family All 149
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 2.2.24-alt1	13 Jul 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package python3-module-django version 2.2.24-alt1	13 Jul 202100:00	–	altlinux
AlpineLinux	CVE-2021-33203	8 Jun 202117:52	–	alpinelinux
ArchLinux	[ASA-202106-41] python-django: multiple issues	15 Jun 202100:00	–	archlinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
CNNVD	Django 路径遍历漏洞	2 Jun 202100:00	–	cnnvd
CNVD	Django path traversal vulnerability (CNVD-2022-31940)	8 Jun 202100:00	–	cnvd
CVE	CVE-2021-33203	8 Jun 202117:52	–	cve
Cvelist	CVE-2021-33203	8 Jun 202117:52	–	cvelist
Debian	[SECURITY] [DLA 2676-1] python-django security update	5 Jun 202109:58	–	debian

Vulners

Node

django_project djangoRange3.2–3.2.4pip

django_project djangoRange3.0–3.1.12pip

django_project djangoRange<2.2.24pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-33203
groups	www.groups.google.com/forum/
github	www.github.com/django/django/commit/053cc9534d174dc89daba36724ed2dcb36755b90
github	www.github.com/django/django/commit/20c67a0693c4ede2b09af02574823485e82e4c8f
github	www.github.com/django/django/commit/dfaba12cda060b8b292ae1d271b44bf810b1c5b9
docs	www.docs.djangoproject.com/en/3.2/releases/security
github	www.github.com/advisories/GHSA-68w8-qjq3-2gfm
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-98.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV
security	www.security.netapp.com/advisory/ntap-20210727-0004

20 Sep 2024 15:32Current

4.4Medium risk

Vulners AI Score4.4

CVSS 24

CVSS 3.14.9

EPSS0.00143

CWE-22