logo

Database

Lack of data validation - Path Traversal In django

Description

directory traversal

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-32812. NVD-2021-32813. OSV-2021-32814. OSV-DEBIAN-2021-32815. GHSA-fvgf-6h6h-33226. GCVE-2021-32817. SECURITY-TRACKER-CVE-2021-3281

References

1. https://github.com/django/django/commit/02e6592835b4559909aa3aaaf67988fef435f6242. https://github.com/django/django/commit/05413afa8c18cdb978fcdf470e09f7a12b234a233. https://github.com/django/django/commit/21e7622dec1f8612c85c2fc37fe8efbfd3311e374. https://github.com/django/django/commit/52e409ed17287e9aabda847b6afe58be2fa9f86a5. https://docs.djangoproject.com/en/3.1/releases/3.0.126. https://docs.djangoproject.com/en/3.1/releases/security7. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-9.yaml8. https://groups.google.com/forum/#!forum/django-announce9. https://lists.fedoraproject.org/archives/list/[email protected]/message/YF52FKEH5S2P5CM4X7IXSYG67YY2CDOO10. https://security.netapp.com/advisory/ntap-20210226-000411. https://www.djangoproject.com/weblog/2021/feb/01/security-releases12. https://github.com/lwzSoviet/CVE-2021-3281

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.