Debian: Security Advisory (DLA-2622-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-2622-1 python-django - security update

Bulletin has no description...

GHSA-XGXC-V2QG-CHMH Directory Traversal in Django

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability...

alcali (>=2018.3.4, <=3000.1.0), archivebox (>=0.4.6, <=0.4.21) +72 more potentially affected by CVE-2021-28658 via django (>=3.0.0rc1, <=3.0.11)

django PYPI version =3.0.0rc1, =2018.3.4, =0.4.6, =0.1.3, =0.1.3, =0.3.0, =0.0.1, =0.1.1, =0.0.1, =1.2.0, =1.2.3 - deustest2022 1.0.0 - django-account-rcg-chandu 0.1.0 - django-account-rcgchandu 0.2.0 - django-acsecure 0.1.3 - django-admin-custom-filters 0.1.0 and more Source cves: CVE-2021-28658...

Directory Traversal in Django

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability...

Directory Traversal

Django is vulnerable to Directory Traversal. An attacker is able upload files with malicious file names via MultiPartParser as it does not sanitize the filename parameter. Built-in upload handlers were not affected by this vulnerability...

Django Directory Traversal Vulnerability (CNVD-2021-45275)

Django is an advanced Python web framework that pushes rapid development and clean, functional design. A directory traversal vulnerability exists in MultiPartParser in Django. The vulnerability can be exploited to perform directory traversal via an uploaded file with a specially crafted filename...

Django 2.2 < 2.2.20, 3.0 < 3.0.14, 3.1 < 3.1.8 Directory Traversal Vulnerability - Windows

Django is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if...

Django 2.2 < 2.2.20, 3.0 < 3.0.14, 3.1 < 3.1.8 Directory Traversal Vulnerability - Linux

Django is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if...

Ubuntu: Security Advisory (USN-4902-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Potential sensitive information disclosed in error reports

django-registration is a user-registration application for Django. Impact The django-registration package provides tools for implementing user-account registration flows in the Django web framework. In django-registration prior to 3.1.2, the base user-account registration view did not properly...

GHSA-58C7-PX5V-82HH Potential sensitive information disclosed in error reports

django-registration is a user-registration application for Django. Impact The django-registration package provides tools for implementing user-account registration flows in the Django web framework. In django-registration prior to 3.1.2, the base user-account registration view did not properly...

CVE-2021-28658

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability...

DEBIAN-CVE-2021-28658

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability...

CVE-2021-28658

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability...

alcali (>=2018.3.4, <=3000.1.0), archivebox (>=0.4.6, <=0.4.21) +59 more potentially affected by CVE-2021-28658 via django (>=3.0.0, <=3.0.11)

django PYPI version =3.0.0, =2018.3.4, =0.4.6, =0.1.3, =0.0.1, =1.2.0, =0.2.0, =0.2.1, =0.8.0, =0.9.4 and more Source cves: CVE-2021-28658 Source advisory: OSV:PYSEC-2021-6...

aimmo (>=0.61.9b59, <=0.69.1), alcali (>=2018.3.1, <=2019.2.3) +89 more potentially affected by CVE-2021-28658 via django (>=2.2.0, <=2.2.19)

django PYPI version =2.2.0, =0.61.9b59, =2018.3.1, =0.3.62, =0.14.0, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =1.0.0, =0.0.30, =0.0.1, =0.0.5 and more Source cves: CVE-2021-28658 Source advisory: OSV:PYSEC-2021-6...

Directory traversal

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability...

PYSEC-2021-6

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability...

alcali (3003.1.0), archivebox (>=0.5.0, <=0.5.4) +60 more potentially affected by CVE-2021-28658 via django (>=3.1.0, <=3.1.7)

django PYPI version =3.1.0, =0.5.0, =0.1.0, =1.0.0b3, =2.2.0, =0.0.32, =0.0.38, =20.13.1, =0.1.0, =0.10.0, =1.0.9, =1.2.2 and more Source cves: CVE-2021-28658 Source advisory: OSV:PYSEC-2021-6...