RHEL 8 : Red Hat OpenStack Platform 16.2 (python-django20) (RHSA-2021:3490)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3490 advisory. Security Fixes: Potential directory-traversal via archive.extract CVE-2021-3281 Potential directory traversal via admindocs CVE-2021-33203...

RHEL 8 : Red Hat OpenStack Platform 16.1 (python-django20) (RHSA-2021:5070)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5070 advisory. Security Fixes: Potential directory-traversal via archive.extract CVE-2021-3281 potential directory-traversal via uploaded files...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update

An update for python-django20 is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Exploit for Path Traversal in Djangoproject Django

CVE-2021-3281 There is a Directory Traversal vulnerability in...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.19-alt1

2.2.19-alt1 built April 12, 2021 Alexey Shabalin in task 266900 Feb. 24, 2021 Alexey Shabalin - 2.2.19 - rename package to python3-module-django back - Fixes for the following security vulnerabilities: + CVE-2021-3281 Potential directory-traversal via archive.extract + CVE-2021-23336 Web cache...

aimmo (>=0.61.9b59, <=0.67.1b256), alcali (>=2018.3.1, <=2019.2.3) +87 more potentially affected by CVE-2021-3281 via django (>=2.2.0, <=2.2.17)

django PYPI version =2.2.0, =0.61.9b59, =2018.3.1, =0.3.62, =0.14.0, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =0.0.30, =0.0.1, =0.0.5 - django-basic-auth-ip-whitelist 0.2.0 and more Source cves: CVE-2021-3281 Source advisory: OSV:GHSA-FVGF-6H6H-3322...

aimmo (>=0.61.9b59, <=0.67.1b256), alcali (>=2018.3.1, <=2019.2.3) +87 more potentially affected by CVE-2021-3281 via django (>=2.2.0, <=2.2.17)

django PYPI version =2.2.0, =0.61.9b59, =2018.3.1, =0.3.62, =0.14.0, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =0.0.30, =0.0.1, =0.0.5 - django-basic-auth-ip-whitelist 0.2.0 and more Source cves: CVE-2021-3281 Source advisory: GHSA-FVGF-6H6H-3322...

alcali (>=2018.3.4, <=3000.1.0), archivebox (>=0.4.6, <=0.4.21) +59 more potentially affected by CVE-2021-3281 via django (>=3.0.0, <=3.0.11)

django PYPI version =3.0.0, =2018.3.4, =0.4.6, =0.1.3, =0.0.1, =1.2.0, =0.2.0, =0.2.1, =0.8.0, =0.9.4 and more Source cves: CVE-2021-3281 Source advisory: GHSA-FVGF-6H6H-3322...

archivebox (>=0.5.0, <=0.5.4), ariadne-jwt (>=0.1.0, <=0.1.3) +53 more potentially affected by CVE-2021-3281 via django (>=3.1.0, <=3.1.5)

django PYPI version =3.1.0, =0.5.0, =0.1.0, =1.0.0b3, =0.0.32, =0.0.38, =20.13.1, =0.1.0, =0.10.0, =0.9.0, =0.4.0, =0.7.3 and more Source cves: CVE-2021-3281 Source advisory: OSV:GHSA-FVGF-6H6H-3322...

archivebox (>=0.5.0, <=0.5.4), ariadne-jwt (>=0.1.0, <=0.1.3) +53 more potentially affected by CVE-2021-3281 via django (>=3.1.0, <=3.1.5)

django PYPI version =3.1.0, =0.5.0, =0.1.0, =1.0.0b3, =0.0.32, =0.0.38, =20.13.1, =0.1.0, =0.10.0, =0.9.0, =0.4.0, =0.7.3 and more Source cves: CVE-2021-3281 Source advisory: GHSA-FVGF-6H6H-3322...

alcali (>=2018.3.4, <=3000.1.0), archivebox (>=0.4.6, <=0.4.21) +59 more potentially affected by CVE-2021-3281 via django (>=3.0.0, <=3.0.11)

django PYPI version =3.0.0, =2018.3.4, =0.4.6, =0.1.3, =0.0.1, =1.2.0, =0.2.0, =0.2.1, =0.8.0, =0.9.4 and more Source cves: CVE-2021-3281 Source advisory: OSV:GHSA-FVGF-6H6H-3322...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 1.2.2 security and bug fix update

An update is now available for Red Hat Ansible Automation Platform 1.2.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Security fix for the ALT Linux 10 package python3-module-django version 2.2.19-alt1

Feb. 24, 2021 Alexey Shabalin 2.2.19-alt1 - 2.2.19 - rename package to python3-module-django back - Fixes for the following security vulnerabilities: + CVE-2021-3281 Potential directory-traversal via archive.extract + CVE-2021-23336 Web cache poisoning via django.utils.http.limitedparseqsl...

Fedora 33 : python-django (2021-5329c680f7)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5329c680f7 advisory. - In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method used by startapp --template and...

Fedora: Security Advisory for python-django (FEDORA-2021-5329c680f7)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[ASA-202102-18] python-django: directory traversal

Arch Linux Security Advisory ASA-202102-18 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2021-3281 Package : python-django Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-1518 Summary ======= The package python-django befo...

aimmo (>=0.61.9b59, <=0.67.1b256), alcali (>=2018.3.1, <=2019.2.3) +87 more potentially affected by CVE-2021-3281 via django (>=2.2.0, <=2.2.17)

django PYPI version =2.2.0, =0.61.9b59, =2018.3.1, =0.3.62, =0.14.0, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =0.0.30, =0.0.1, =0.0.5 - django-basic-auth-ip-whitelist 0.2.0 and more Source cves: CVE-2021-3281 Source advisory: OSV:PYSEC-2021-9...

archivebox (>=0.5.0, <=0.5.4), ariadne-jwt (>=0.1.0, <=0.1.3) +53 more potentially affected by CVE-2021-3281 via django (>=3.1.0, <=3.1.5)

django PYPI version =3.1.0, =0.5.0, =0.1.0, =1.0.0b3, =0.0.32, =0.0.38, =20.13.1, =0.1.0, =0.10.0, =0.9.0, =0.4.0, =0.7.3 and more Source cves: CVE-2021-3281 Source advisory: OSV:PYSEC-2021-9...

CVE-2021-3281

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method used by "startapp --template" and "startproject --template" allows directory traversal via an archive with absolute paths or relative paths with dot segments...

aimmo (>=0.61.9b59, <=0.67.1b256), alcali (>=2018.3.1, <=2019.2.3) +87 more potentially affected by CVE-2021-3281 via django (>=2.2.0, <=2.2.17)

django PYPI version =2.2.0, =0.61.9b59, =2018.3.1, =0.3.62, =0.14.0, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =0.0.30, =0.0.1, =0.0.5 - django-basic-auth-ip-whitelist 0.2.0 and more Source cves: CVE-2021-3281 Source advisory: MEND:CVE-2021-3281...