Поиск уязвимостей
Количество 10
Количество 10
BDU:2024-07170
Уязвимость функции generate_filename() класса django.core.files.storage.Storage программной платформы для веб-приложений Django, позволяющая нарушителю записывать произвольные файлы
CVE-2024-39330
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentially allow directory traversal via certain inputs during a save() call. (Built-in Storage sub-classes are unaffected.)
CVE-2024-39330
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentially allow directory traversal via certain inputs during a save() call. (Built-in Storage sub-classes are unaffected.)
CVE-2024-39330
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentially allow directory traversal via certain inputs during a save() call. (Built-in Storage sub-classes are unaffected.)
CVE-2024-39330
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2. ...
ALT-PU-2025-10176
ALT-PU-2025-10176: package `python3-module-django` update to version 5.2.5-alt1
GHSA-9jmf-237g-qf46
Django Path Traversal vulnerability
SUSE-SU-2024:2577-1
Security update for python-Django
ALT-PU-2024-10534
ALT-PU-2024-10534: package `python3-module-django` update to version 4.2.14-alt1
SUSE-SU-2024:2545-1
Security update for python-Django
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-07170 Уязвимость функции generate_filename() класса django.core.files.storage.Storage программной платформы для веб-приложений Django, позволяющая нарушителю записывать произвольные файлы | CVSS3: 5.5 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-39330 An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentially allow directory traversal via certain inputs during a save() call. (Built-in Storage sub-classes are unaffected.) | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-39330 An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentially allow directory traversal via certain inputs during a save() call. (Built-in Storage sub-classes are unaffected.) | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-39330 An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentially allow directory traversal via certain inputs during a save() call. (Built-in Storage sub-classes are unaffected.) | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
| CVE-2024-39330 An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2. ... | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
| ALT-PU-2025-10176 ALT-PU-2025-10176: package `python3-module-django` update to version 5.2.5-alt1 | CVSS3: 9.8 | около 1 года назад | |
| GHSA-9jmf-237g-qf46 Django Path Traversal vulnerability | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:2577-1 Security update for python-Django | больше 2 лет назад | ||
| ALT-PU-2024-10534 ALT-PU-2024-10534: package `python3-module-django` update to version 4.2.14-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
| SUSE-SU-2024:2545-1 Security update for python-Django | больше 2 лет назад |
Уязвимостей на страницу