Lucene search
+L

17 matches found

OSV
OSV
added 2026/06/29 11:50 a.m.10 views

PYSEC-2026-328 django-s3file is vulnerable to relative path traversal

Impact S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified request to escape pre-signed upload locations and have the Django application load files from random locations into request.FILES Depending on how files are handled, this may lead to...

9.9CVSS5.8AI score0.00564EPSS
SaveExploits0References5
Rows per page
Query Builder