logo

Database

Lack of data validation - Path Traversal In python-django

Description

directory traversal

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-315422. NVD-2021-315423. OSV-DEBIAN-2021-315424. OSV-2021-315425. GHSA-rxjp-mfm9-w4wr6. GCVE-2021-315427. SECURITY-TRACKER-CVE-2021-315428. lists.debian.org

References

1. https://github.com/django/django/commit/04ac1624bdc2fa737188401757cf95ced122d26d2. https://github.com/django/django/commit/25d84d64122c15050a0ee739e859f22ddab5ac483. https://github.com/django/django/commit/c98f446c188596d4ba6de71d1b77b4a6c5c2a0074. https://www.djangoproject.com/weblog/2021/may/04/security-releases5. https://security.netapp.com/advisory/ntap-20210618-00016. https://lists.fedoraproject.org/archives/list/[email protected]/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE7. https://lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV8. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE9. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV10. https://groups.google.com/forum/#%21forum/django-announce11. https://groups.google.com/forum/#!forum/django-announce12. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-7.yaml13. https://docs.djangoproject.com/en/3.2/releases/security14. http://www.openwall.com/lists/oss-security/2021/05/04/3

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.