Arbitrary file upload in Django - CVE-2021-31542

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU52842

Arbitrary file upload in Django - CVE-2021-31542

Published: May 4, 2021


Vulnerability identifier: #VU52842
CSH Severity: High
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-31542
CWE-ID: CWE-434
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to insufficient validation of file during file upload via the MultiPartParser, UploadedFile, and FieldFile methods. A remote attacker can upload a file with a specially crafted filename containing directory traversal characters and overwrite arbitrary files on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise the affected system.


Affected software

Django
Gentoo Linux
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
Ubuntu
Fedora
python-django (Ubuntu package)
python3-django (Ubuntu package)
python-Django
python-django20 (Red Hat package)
rubygem-puma-debugsource
ruby2.1-rubygem-puma-debuginfo
ruby2.1-rubygem-puma
python-django
rubygem-redcarpet-debugsource
ruby2.1-rubygem-redcarpet-debuginfo
ruby2.1-rubygem-redcarpet
python-django3
dev-python/django
documentation-hpe-helion-openstack-operations
documentation-hpe-helion-openstack-user
documentation-hpe-helion-openstack-security
documentation-hpe-helion-openstack-planning
documentation-hpe-helion-openstack-opsconsole
documentation-suse-openstack-cloud-deployment
documentation-hpe-helion-openstack-installation
documentation-suse-openstack-cloud-user
documentation-suse-openstack-cloud-security
documentation-suse-openstack-cloud-planning
documentation-suse-openstack-cloud-opsconsole
documentation-suse-openstack-cloud-operations
documentation-suse-openstack-cloud-installation
documentation-suse-openstack-cloud-upstream-user
documentation-suse-openstack-cloud-upstream-admin
documentation-suse-openstack-cloud-supplement
Red Hat OpenStack

How to mitigate CVE-2021-31542

Install updates from vendor's website.

Django - addressed in versions 2.2.21, 3.1.9, 3.2.1
python-django (Ubuntu package) - addressed in versions 1.8.71ubuntu5.15+esm1, 1:1.11.11-1ubuntu1.13
python3-django (Ubuntu package) - addressed in versions 1.8.71ubuntu5.15+esm1, 1:1.11.11-1ubuntu1.13, 2:2.2.12-1ubuntu0.6, 2:2.2.16-1ubuntu0.4, 2:2.2.20-1ubuntu0.1
python-Django - update to 1.11.29-3.28.1
python-django20 (Red Hat package) - update to 2.0.13-16.el8ost.1
rubygem-puma-debugsource - update to 2.16.0-3.15.1
ruby2.1-rubygem-puma-debuginfo - update to 2.16.0-3.15.1
ruby2.1-rubygem-puma - update to 2.16.0-3.15.1
python-django - addressed in versions 3.1.9-1.fc34, 3.2.12-1.fc35, 4.0.2-1.fc36
rubygem-redcarpet-debugsource - update to 3.2.3-3.3.1
ruby2.1-rubygem-redcarpet-debuginfo - update to 3.2.3-3.3.1
ruby2.1-rubygem-redcarpet - update to 3.2.3-3.3.1
python-django3 - update to 3.2.15-1.fc38
dev-python/django - update to 5.2.1
documentation-hpe-helion-openstack-operations - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-user - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-security - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-planning - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-opsconsole - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-deployment - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-installation - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-user - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-security - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-planning - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-opsconsole - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-operations - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-installation - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-upstream-user - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-upstream-admin - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-supplement - update to 8.20210806-1.35.1
Red Hat OpenStack - update to 16.1

External References

Related Security Bulletins