Arbitrary File Write

🗓️ 02 Feb 2021 01:38:27Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

django vulnerability arbitrary file writ

Reporter	Title	Published	Views	Family All 85
ALT Linux	Security fix for the ALT Linux 9 package python3-module-django version 2.2.19-alt1	12 Apr 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 2.2.19-alt1	24 Feb 202100:00	–	altlinux
GithubExploit	Exploit for Path Traversal in Djangoproject Django	5 Jul 202108:25	–	githubexploit
AlpineLinux	CVE-2021-3281	2 Feb 202106:16	–	alpinelinux
ArchLinux	[ASA-202102-18] python-django: directory traversal	7 Feb 202100:00	–	archlinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the django.utils.archive.extract method in the Django framework, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity.	22 Jul 202100:00	–	bdu_fstec
Circl	CVE-2021-3281	7 Jul 202111:47	–	circl
CNNVD	Django Path Traversal Vulnerability	1 Feb 202100:00	–	cnnvd
CVE	CVE-2021-3281	2 Feb 202106:16	–	cve

Vulners

Node

python-django python-djangoMatch1:1.10.7-2+deb9u9debian

AND

debian debian_linuxMatch9

google bionicMatch1:1.11.11-1ubuntu1.9debian

AND

google bionicMatch1:1.11.11-1ubuntu1debian

AND

debian debian_linux

xenial xenialMatch1.8.7-1ubuntu5.13debian

AND

xenial xenialMatch1.8.7-1ubuntu5debian

AND

debian debian_linux

py3-django py3-djangoMatch1.11.28-r0python

AND

py3-django py3-djangoMatch1.11.29-r0python

AND

alpinelinux alpine_linuxMatchedge

python-django python-djangoMatch1:1.11.29-1~deb10u1debian

AND

debian debian_linuxMatch10

django_project djangoRange3.0a1–3.0.11python

django_project djangoRange3.1a1–3.1.5python

django_project djangoRange1.4–2.2.17python

python-django20 python-django20Match2.0.13_2.el8ost

python-django20 python-django20Match2.0.13_12.el8ost

python-pulp-ansible python-pulp-ansibleMatch0.5.5_1.el7pc

python-pulp-ansible python-pulp-ansibleMatch0.5.0_1.el7pc

automation-hub automation-hubMatch4.2.1_2.el7pc

automation-hub automation-hubMatch4.2.0_1.el7pc

python-bleach python-bleachMatch3.2.1_1.el7pc

python-bleach python-bleachMatch1.4.1_2.el7

python-galaxy-importer python-galaxy-importerMatch0.2.11_1.el7pc

python-galaxy-importer python-galaxy-importerMatch0.2.12_1.el7pc

python-galaxy-ng python-galaxy-ngMatch4.2.0_1.el7pc

python-galaxy-ng python-galaxy-ngMatch4.2.1_1.el7pc

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/django/django/commit/21e7622dec1f8612c85c2fc37fe8efbfd3311e37
github	www.github.com/django/django/commit/52e409ed17287e9aabda847b6afe58be2fa9f86a
github	www.github.com/django/django/commit/02e6592835b4559909aa3aaaf67988fef435f624
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YF52FKEH5S2P5CM4X7IXSYG67YY2CDOO/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/YF52FKEH5S2P5CM4X7IXSYG67YY2CDOO/
docs	www.docs.djangoproject.com/en/3.1/releases/security/
groups	www.groups.google.com/forum/
groups	www.groups.google.com/forum/
security	www.security.netapp.com/advisory/ntap-20210226-0004/

07 Nov 2023 23:43Current

2.6Low risk

Vulners AI Score2.6

CVSS 25

CVSS 3.15.3

EPSS0.07605