Path Traversal

🗓️ 06 Jan 2022 04:31:30Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 66 Views

Django storage save function path traversal vulnerability

Reporter	Title	Published	Views	Family All 125
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.11-alt1	24 Jan 202200:00	–	altlinux
AlpineLinux	CVE-2021-45452	4 Jan 202223:09	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
CNNVD	Django 路径遍历漏洞	4 Jan 202200:00	–	cnnvd
CNVD	Django path traversal vulnerability (CNVD-2022-31938)	6 Jan 202200:00	–	cnvd
CVE	CVE-2021-45452	4 Jan 202223:09	–	cve
Cvelist	CVE-2021-45452	4 Jan 202223:09	–	cvelist
FreeBSD	Django -- multiple vulnerabilities	20 Dec 202100:00	–	freebsd
Debian	[SECURITY] [DLA 3191-1] python-django security update	17 Nov 202222:00	–	debian
Debian CVE	CVE-2021-45452	4 Jan 202223:09	–	debiancve

Vulners

Node

google bionicMatch1:1.11.11-1ubuntu1.14debian

AND

google bionicMatch1:1.11.11-1ubuntu1.9debian

AND

google bionicMatch1:1.11.11-1ubuntu1debian

AND

debian debian_linux

py3-django py3-djangoMatch1.11.29-r0python

AND

py3-django py3-djangoMatch3.1.7-r0python

AND

py3-django py3-djangoMatch3.1.7-r1python

AND

py3-django py3-djangoMatch3.1.13-r0python

AND

py3-django py3-djangoMatch3.1.8-r0python

AND

py3-django py3-djangoMatch3.1.13-r1python

AND

py3-django py3-djangoMatch1.11.28-r0python

AND

alpinelinux alpine_linuxMatchedge

python-django python-djangoMatch1:1.11.29-1~deb10u1debian

AND

debian debian_linuxMatch10

django_project djangoRange1.0.1–2.2.25python

django_project djangoRange3.0a1–3.2.10python

django_project djangoRange4.0a1–4.0python

python-django python-djangoMatch2.2.9_1.el8

python-django python-djangoMatch3.2.9_3.el8ui

python-django python-djangoMatch2.1.11_1.el8ost

python-django python-djangoMatch2.2.13_1.el8

python-django python-djangoMatch2.2.19_1.el8

python-django python-djangoMatch2.0.10_1.el8ost

python-django python-djangoMatch2.2.24_1.el8

python-django python-djangoMatch2.2.17_1.el8

python-django python-djangoMatch2.2.3_1.el8

python-django python-djangoMatch2.1.7_1.el8d

python-django python-djangoMatch2.2.24_1.el8ui

python-django python-djangoMatch2.2.9_1.epel8.playground

python-django python-djangoMatch2.2.17_1.el8pc

python-django python-djangoMatch2.2.3_1.epel8.playground

python-django python-djangoMatch3.2.7_4.el8pc

python-django python-djangoMatch2.2.13_1.epel8.playground

Source	Link
docs	www.docs.djangoproject.com/en/4.0/releases/security/
groups	www.groups.google.com/forum/
djangoproject	www.djangoproject.com/weblog/2022/jan/04/security-releases/
github	www.github.com/django/django/commit/8d2f7cff76200cbd2337b2cf1707e383eb1fb54b
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
groups	www.groups.google.com/forum/
security	www.security.netapp.com/advisory/ntap-20220121-0005/

07 Nov 2023 22:29Current

5.1Medium risk

Vulners AI Score5.1

CVSS 25

CVSS 3.15.3

EPSS0.00238