Django Path Traversal vulnerability

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generatefilename without replicating the file-path validations from the parent class, potentially allow directory traversal via certain...

CVE-2024-39330

CVE-2024-39330 affects Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of django.core.files.storage.Storage that override generate_filename() without mirroring the parent’s file-path validations can trigger directory traversal during save(). Built-in Storage subclasses are not affe...