CVE-2021-45452

score

<0.1

cvss

5.3

epss

2.4%

published

2022-01-05

kev added

—

first seen

2026-10-21

Django 2.2 < 2.2.26, 3.2 < 3.2.11, and 4.0 < 4.0.1 contain a directory traversal caused by handling crafted filenames in Storage.save, letting attackers access arbitrary files, exploit requires passing malicious filenames directly.