QID 198351

Date Published: 2021-05-12

QID 198351: Ubuntu Security Notification for Django vulnerability (USN-4932-1)

Django incorrectly handled certain filenames

A remote attacker could possibly use this issue to create or overwrite files in unexpected directories

  • CVSS V3 rated as High - 7.5 severity.
  • CVSS V2 rated as Medium - 5 severity.
  • Solution
    Refer to Ubuntu advisory: USN-4932-1 for affected packages and patching details, or update with your package manager.
    Vendor References

    CVEs related to QID 198351

    Software Advisories
    Advisory ID Software Component Link
    USN-4932-1 Ubuntu Linux URL Logo usn.ubuntu.com/4932-1