USN-4932-1 python-django vulnerability

It was discovered that Django incorrectly handled certain filenames. A remote attacker could possibly use this issue to create or overwrite files in unexpected directories...

UBUNTU-CVE-2021-31542

In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names...

CVE-2021-31542

In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names...

Django 代码问题漏洞

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper, view system, template system, and more. A code issue vulnerability exists in Django that stems from insufficient validation of files when...

PT-2021-4548

Name of the Vulnerable Software and Affected Versions Django versions 2.2 through 2.2.20 Django versions 3.1 through 3.1.8 Django versions 3.2 through 3.2.0 Description The issue is related to the lack of restrictions on file uploads in the Django web application platform, specifically in the...

Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerability (USN-4932-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4932-1 advisory. It was discovered that Django incorrectly handled certain filenames. A remote attacker could possibly use this issue to create or overwrite files in...

CVE-2020-15225

A flaw was found in python-django-filter. Automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential format with sufficiently large exponents...

Denial Of Service (DoS)

django-filters is vulnerable to denial of service. An attacker is able to cause an application crash by submitting malicious input using exponential format with large exponents...

CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

DEBIAN-CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

django-arctic (0.9.6), searchstax-simulator-crawler (0.0.1a23) potentially affected by CVE-2020-15225 via django-filter (1.0.1)

django-filter PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-filter and may be impacted: - django-arctic 0.9.6 - searchstax-simulator-crawler 0.0.1a23 Source cves: CVE-2020-15225 Source advisory: OSV:PYSEC-2021-64...

Design/Logic Flaw

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

camd (>=2020.5.19, <=2021.6.11.post4), dj-core-drf (>=0.1.0, <=0.2.1) +46 more potentially affected by CVE-2020-15225 via django-filter (1.1.0)

django-filter PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-filter and may be impacted: - camd =2020.5.19, =0.1.0, =0.4.12, =0.3.2, =1.0.0, =0.7.1, =0.2.3, =0.2.0, =0.3.0, =0.3.0, =0.1.0, =0.0.1, =0.0.16, =0.5.1, =0.1.0,...

PYSEC-2021-64

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

UBUNTU-CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

caluma (>=5.2.1, <=6.6.0), course-access-groups (0.3.0) +70 more potentially affected by CVE-2020-15225 via django-filter (>=2.0.0.dev1, <=2.3.0)

django-filter PYPI version =2.0.0.dev1, =5.2.1, =0.6.0, =0.7.0, =0.3.0a0, =0.8.1, =0.3.0, =0.7.2, =0.6.3, =0.5.4, =0.2.7, =0.6.1, =0.7.8 and more Source cves: CVE-2020-15225 Source advisory: OSV:PYSEC-2021-64...

django-arctic (0.9.5), django-bread (>=0.4.0, <=0.5.1) +2 more potentially affected by CVE-2020-15225 via django-filter (0.15.3)

django-filter PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-filter and may be impacted: - django-arctic 0.9.5 - django-bread =0.4.0, =0.23.0, =0.37.1 - silent-auction 0.1.3 Source cves: CVE-2020-15225 Source advisory:...

CVE-2020-15225

django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential...

autogenerated-api (>=1.0.2, <=1.1.12), dj-core-drf (>=0.0.1, <=0.0.8) +11 more potentially affected by CVE-2020-15225 via django-filter (1.0.4)

django-filter PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django-filter and may be impacted: - autogenerated-api =1.0.2, =0.0.1, =0.7.3, =0.4.10, =0.9.35, =4.0.0, =5.0.0, =1.6.0, =1.3.0, =0.0.6, =0.0.12 Source cves: CVE-2020-1522...