Lucene search

K
osvGoogleOSV:USN-4932-1
HistoryMay 04, 2021 - 12:01 p.m.

python-django vulnerability

2021-05-0412:01:44
Google
osv.dev
7
django
vulnerability
filenames
remote attacker
file manipulation
software

AI Score

7.3

Confidence

Low

EPSS

0.002

Percentile

59.7%

It was discovered that Django incorrectly handled certain
filenames. A remote attacker could possibly use this issue to create or
overwrite files in unexpected directories.