17 matches found
PYSEC-2026-328 django-s3file is vulnerable to relative path traversal
Impact S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified request to escape pre-signed upload locations and have the Django application load files from random locations into request.FILES Depending on how files are handled, this may lead to...
9.9CVSS5.8AI score0.00565EPSS
SaveExploits0References5
20