Lucene search
+L

2 matches found

Mageia
Mageia
added 2021/07/16 8:25 a.m.69 views

Updated python-django package fixes security vulnerabilities

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability CVE-2021-28658. In Django 2.2 before 2.2.21, 3.1 before 3.1.9, an...

9.8CVSS1.7AI score0.44369EPSS
SaveExploits1References16
CVE
CVE
added 2021/06/08 12:0 a.m.220 views

CVE-2021-33571

CVE-2021-33571 affects Django: URLValidator, validate_ipv4_address, and validate_ipv46_address fail to prohibit leading zeros in octal literals in affected releases (2.2.x <2.2.24, 3.x <3.1.12, 3.2

7.5CVSS7.4AI score0.05217EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder