CVE-2021-3281 log

Severity Low
Remote No
Type Directory traversal
In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.
Group Package Affected Fixed Severity Status Ticket
AVG-1518 python-django 3.1.5-1 3.1.6-1 Low Fixed
Date Advisory Group Package Severity Type
07 Feb 2021 ASA-202102-18 AVG-1518 python-django Low directory traversal