Lucene search

K

GoogleOSV:CVE-2021-45452

HistoryJan 05, 2022 - 12:15 a.m.

CVE-2021-45452

2022-01-0500:15:07

Google

osv.dev

11

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.0%

Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it.

CPENameOperatorVersion
djangoeq2.2.11
djangoeq2.2.25
djangoeq2.2.8
djangoeq2.2.19
djangoeq2.2.18
djangoeq2.2.24
djangoeq2.2.21
djangoeq2.2.15
djangoeq2.2.10
djangoeq2.2.14

Rows per page:

1-10 of 261

References

docs.djangoproject.com/en/4.0/releases/security/

groups.google.com/forum/#%21forum/django-announce

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/

security.netapp.com/advisory/ntap-20220121-0005/

www.djangoproject.com/weblog/2022/jan/04/security-releases/

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.0%

Related for OSV:CVE-2021-45452

prion1 nvd1 ubuntucve1 cve1 redhatcve1 osv6 alpinelinux1 cvelist1 github1 debiancve1 veracode1 nessus6 mageia1 openvas6 freebsd1 ubuntu1 altlinux1 redos1 debian1 fedora1 redhat1 rocky1