Lucene search
+L

1 matches found

OSV
OSV
added 2022/06/06 7:10 p.m.20 views

CVE-2022-24840 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in django-s3file

django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. If the AWSLOCATION setting was set, traversal was limited to that location only. The issue was...

9.1CVSS9.2AI score
SaveExploits0References4
Rows per page
Query Builder