Description
In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names.
Remediation
References
Related Vulnerabilities
Nginx buffer underflow vulnerability
Joomla Improper Input Validation Vulnerability (CVE-2013-5576)
WordPress Plugin WordPress Popular Posts Multiple Vulnerabilities (5.3.2)
Magento CVE-2019-8144 Vulnerability (CVE-2019-8144)
WordPress Plugin Font Uploader 'font-upload.php' Arbitrary File Upload (1.2.4)