Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2021/03/18 8:30 p.m.•69 views

Django Incorrect Default Permissions

An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 when Python 3.7+ is used. FILEUPLOADDIRECTORYPERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level...

7.5CVSS7.4AI score0.03969EPSS
SaveExploits0References15Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/09/08 12:00 a.m.•37 views

FreeBSD : Django -- multiple vulnerabilities (002432c8-ef6a-11ea-ba8f-08002728f74c)

Django Release notes : CVE-2020-24583: Incorrect permissions on intermediate-level directories on Python 3.7+ On Python 3.7+, FILEUPLOADDIRECTORYPERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files and to intermediate-level collected static...

7.5CVSS7.3AI score0.03969EPSS
SaveExploits0References6
Veracode
Veracode
•added 2020/09/02 3:58 a.m.•48 views

Authorization Bypass

django is vulnerable to authorization bypass. The FILEUPLOADDIRECTORYPERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files and to intermediate-level collected static directories when using the collectstatic management command...

7.5CVSS3.1AI score0.03969EPSS
SaveExploits0References16Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/01 12:00 a.m.•3 views

CVE-2020-24583: Incorrect Default Permissions

An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 when Python 3.7+ is used. FILEUPLOADDIRECTORYPERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level...

7.5CVSS5.8AI score0.03969EPSS
SaveExploits0References2
Rows per page
Query Builder