CVE-2021-33203 log

Severity Low
Remote Yes
Type Directory traversal
A security issue has been found in Django before version 3.2.4. Staff members could use the admindocs TemplateDetailView view to check the existence of arbitrary files. Additionally, if (and only if) the default admindocs templates have been customized by the developers to also expose the file contents, then not only the existence but also the file contents would have been exposed.
Group Package Affected Fixed Severity Status Ticket
AVG-2026 python-django 3.2.3-2 3.2.4-1 Medium Fixed
Date Advisory Group Package Severity Type
15 Jun 2021 ASA-202106-41 AVG-2026 python-django Medium multiple issues