mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-07-10 20:59:12 +00:00
Code Issues 32 Releases Wiki Activity

[2.2.x] Refs #32718 -- Corrected CVE-2021-31542 release notes.

Browse Source 
Backport of d1f1417caed648db2f81a1ec28c47bf958c01958 from main.
This commit is contained in:
Mariusz Felisiak 2021-05-12 10:42:01 +02:00
parent 88d9b28c0c
commit 3ba089ac7e
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
docs/releases/2.2.21.txt
View File

@ -13,5 +13,4 @@ CVE-2021-31542: Potential directory-traversal via uploaded files
directory-traversal via uploaded files with suitably crafted file names.
In order to mitigate this risk, stricter basename and path sanitation is now
applied. Specifically, empty file names and paths with dot segments will be
rejected.
applied.