CVE-2021-45452

Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it

published January 4, 2022

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02408 · 83.9th percentile
Published
2022-01-04T23:09Z
EPSS history
Timeline
  • 04 JAN 23:09Z
    Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it
    cvelistv5