Beveiligingsadvies

CVE-2021-28658

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-04-06 14:51:43

Laatst bijgewerkt 2024-08-03 21:47:33

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗