CVE-2020-24584

score

<0.1

cvss

7.5

epss

3.3%

published

2020-09-01

kev added

—

first seen

2026-10-21

Django 2.2 < 2.2.16, 3.0 < 3.0.10, and 3.1 < 3.1.1 (when Python 3.7+) contain a misconfiguration in filesystem cache directory permissions caused by using the system's standard umask instead of 0o077, letting local users potentially access cache files, exploit requires Python 3.7+ and specific cache directory setup.