CVE-2021-33203

score

<0.1

cvss

4.9

epss

2.7%

published

2021-06-08

kev added

—

first seen

2026-10-21

Django before 2.2.24, 3.1.12, and 3.2.4 contains a directory traversal caused by insecure handling in django.contrib.admindocs, letting staff members check existence and potentially contents of arbitrary files, exploit requires staff access and default or customized admindocs templates.