CVE-2024-39330

score

<0.1

cvss

4.3

epss

1.0%

published

2024-07-10

kev added

—

first seen

2026-10-21

Django 5.0 before 5.0.7 and 4.2 before 4.2.14 contain a directory traversal caused by derived Storage classes overriding generate_filename() without proper validation, letting attackers manipulate file paths during save(), exploit requires crafted filename inputs.