Most recent entries from all

bdu:2021-03754

BIT-django-2021-3281

Affected: Bitnami: django

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.

EUVD-2026-20780

fkie_cve-2021-3281

GHSA-fvgf-6h6h-3322 — Django Directory Traversal via archive.extract

Affected: PyPI: Django

gsd-2021-3281

PYSEC-2021-9

Affected: PyPI: django

RHSA-2021:0780 — Red Hat Security Advisory: Red Hat Ansible Tower 3.8.2-1 - Container security and bug fix update

python-autobahn: allows redirect header injection django: Potential directory-traversal via archive.extract() ansible-tower: Privilege escalation via job isolation escape

UBUNTU-CVE-2021-3281

Affected: Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:16.04:LTS: python-django, Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django

WID-SEC-W-2022-1352 — Ansible Tower: Mehrere Schwachstellen

Ein lokaler oder entfernter Angreifer kann mehrere Schwachstellen in Ansible Tower ausnutzen, um Informationen offenzulegen oder seine Privilegien zu erweitern.