CVE-2021-31542 PUBLISHED

In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names.

EPSS 6.89% · 91.3th percentile

Risk Scores

EPSS Score
6.89%
91.3th percentile

Affected Products

VendorProductVersions
Bitnamidjango2.2.0, 3.1.0, 3.2.0
Bitnamidjango2.2.0, 3.2.0, 3.1.0

Timeline

References

Open in Interactive Console →