Django Path Traversal vulnerability

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generatefilename without replicating the file-path validations from the parent class, potentially allow directory traversal via certain...

CVE-2024-39330

A directory traversal vulnerability exists in Django versions prior to 5.0.7 and 4.2.14. The root cause is that derived classes of the django.core.files.storage.Storage base class may allow traversal if they override the generate_filename() method without replicating the parent class's file-path ...