---

CVE-2020-24583 - log back

CVE-2020-24583 edited at 03 Sep 2020 17:42:50
Severity	- Unknown + Medium
Remote	- Unknown + Remote
Type	- Unknown + Access restriction bypass
Description	+ An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level collected static directories when using the collectstatic management command.
References	+ https://www.djangoproject.com/weblog/2020/sep/01/security-releases/ + https://github.com/django/django/commit/934430d22aa5d90c2ba33495ff69a6a1d997d584
Notes

CVE-2020-24583 created at 03 Sep 2020 17:38:59