Directory-traversal in Django

🗓️ 12 Jan 2022 19:21:04Reported by GitHub Advisory DatabaseType

Directory-traversal in Django Storage.sav

Reporter	Title	Published	Views	Family All 96
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.11-alt1	24 Jan 202200:00	–	altlinux
ATTACKERKB	CVE-2021-45452	5 Jan 202200:15	–	attackerkb
AlpineLinux	CVE-2021-45452	4 Jan 202223:09	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Python-Django	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the Storage.save() function in the Django web application framework allows a attacker to access confidential information.	25 Jan 202200:00	–	bdu_fstec
CNNVD	Django 路径遍历漏洞	4 Jan 202200:00	–	cnnvd
CNVD	Django path traversal vulnerability (CNVD-2022-31938)	6 Jan 202200:00	–	cnvd
CVE	CVE-2021-45452	4 Jan 202223:09	–	cve
Cvelist	CVE-2021-45452	4 Jan 202223:09	–	cvelist
FreeBSD	Django -- multiple vulnerabilities	20 Dec 202100:00	–	freebsd

Vulners

Node

django_project djangoRange3.2–3.2.11pip

django_project djangoRange2.2–2.2.26pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-45452
groups	www.groups.google.com/forum/
github	www.github.com/django/django/commit/4cb35b384ceef52123fc66411a73c36a706825e1
github	www.github.com/django/django/commit/8d2f7cff76200cbd2337b2cf1707e383eb1fb54b
github	www.github.com/django/django/commit/e1592e0f26302e79856cc7f2218ae848ae19b0f6
docs	www.docs.djangoproject.com/en/4.0/releases/security
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV
security	www.security.netapp.com/advisory/ntap-20220121-0005
djangoproject	www.djangoproject.com/weblog/2022/jan/04/security-releases
github	www.github.com/advisories/GHSA-jrh2-hc4r-7jwx

20 Sep 2024 12:19Current

3.7Low risk

Vulners AI Score3.7

CVSS 25

CVSS 3.15.3

EPSS0.02388