django/tests/utils_tests/traversal_archives/traversal.tar at f944f79e555c91571192022a6bb9ddf2178db7ed

mirror of https://github.com/django/django.git synced 2025-10-10 02:22:22 +00:00

Mariusz Felisiak f944f79e55 [3.2.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().

Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews.

Thanks Wang Baohua for the report.

Backport of 05413afa8c from master.

2021-02-01 09:13:37 +01:00

View raw