django-s3file vulnerabilities
2 known vulnerabilities in django-s3file from Codingjoe. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
9.9average CVSS score
Latest first
- 9.9 Critical severity
django-s3file: Improper Limitation of a Pathname to a Restricted Directory
django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified request to escape pre-signed upload locations and have the Django
- 9.8 Critical severity
django-s3file: Improper Limitation of a Pathname to a Restricted Directory
django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. If the `AWS_LOCATION` setting was set, traversal was limite