REDHAT-BUG-2295937: Low severity Django Django vulnerability
Derived classes of the django.core.files.storage.Storage base class which override generatefilename() without replicating the file path validations existing in the parent class, allow for potential directory-traversal via certain inputs when calling save(). Built-in Storage sub-classes were not affected by this vulnerability.
Affected versions =================
Django main development branch Django 5.1 Django 5.0 Django 4.2
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2295937?
The severity of REDHAT-BUG-2295937 is classified as high due to its potential for directory traversal vulnerabilities.
How do I fix REDHAT-BUG-2295937?
To fix REDHAT-BUG-2295937, ensure that any derived classes of django.core.files.storage.Storage replicate the file path validations from the parent class in their overridden generate_filename() methods.
Which versions of Django are affected by REDHAT-BUG-2295937?
Django versions prior to 5.0 and those between 4.2 and 5.1 are affected by REDHAT-BUG-2295937.
What can happen if REDHAT-BUG-2295937 is exploited?
If REDHAT-BUG-2295937 is exploited, it may lead to unauthorized access to sensitive files on the server due to directory traversal.
What type of applications are at risk for REDHAT-BUG-2295937?
Applications that use custom storage backends in Django and override the generate_filename() method without proper validation are at risk for REDHAT-BUG-2295937.