Description
In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.
Remediation
References
Related Vulnerabilities
Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-33320)
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6613)
Internet Information Services Other Vulnerability (CVE-1999-0407)
Oracle Application Server Other Vulnerability (CVE-2005-1496)
CubeCart Improper Access Control Vulnerability (CVE-2015-6928)