Directory Traversal Vulnerability in Django Framework
CVE-2025-59682
3.1LOW
What is CVE-2025-59682?
A vulnerability in the Django framework allows for partial directory traversal when using the django.utils.archive.extract() function via specific commands. This flaw can be exploited through crafted archive files, potentially leading to unauthorized file access within the target directory. Versions 4.2 prior to 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7 are affected. Users are encouraged to update to the latest versions to mitigate this risk.
Affected Version(s)
Django 4.2 < 4.2.25
Django 5.1 < 5.1.13
Django 5.2 < 5.2.7