Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-42196

django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified request to escape pre-signed upload locations and have the Django application load files from random locations into request.FILES. Depending on how files are handled, this may lead to confidentiality and integrity issues. This vulnerability is fixed in 7.0.2.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f5e056ae86fc3c0658d7da4780baa2f6feabddd61e8e637b7fa218b9d7e0b3e9
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-26","description":"CWE-26: Path Traversal: '/dir/../filename'","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:7dc38439daac44542c25916dd5479936d867b7a92de21acad18622d62c3c21ea · sha256:edf62dca763b505f… · /containers/cna/problemTypes/1/descriptions/0

{"cweId":"CWE-22","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:7dc38439daac44542c25916dd5479936d867b7a92de21acad18622d62c3c21ea · sha256:edf62dca763b505f… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

1 source assertion
{"product":"django-s3file","vendor":"codingjoe","versions":[{"status":"affected","version":"< 7.0.2"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7dc38439daac44542c25916dd5479936d867b7a92de21acad18622d62c3c21ea · sha256:edf62dca763b505f… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.9,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:7dc38439daac44542c25916dd5479936d867b7a92de21acad18622d62c3c21ea · sha256:edf62dca763b505f… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

2 source assertions
{"cweId":"CWE-26","description":"CWE-26: Path Traversal: '/dir/../filename'","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:7dc38439daac44542c25916dd5479936d867b7a92de21acad18622d62c3c21ea · sha256:edf62dca763b505f… · /containers/cna/problemTypes/1/descriptions/0
{"cweId":"CWE-22","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:7dc38439daac44542c25916dd5479936d867b7a92de21acad18622d62c3c21ea · sha256:edf62dca763b505f… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"name":"https://github.com/codingjoe/django-s3file/security/advisories/GHSA-67qg-7284-2277","tags":["x_refsource_CONFIRM"],"url":"https://github.com/codingjoe/django-s3file/security/advisories/GHSA-67qg-7284-2277"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7dc38439daac44542c25916dd5479936d867b7a92de21acad18622d62c3c21ea · sha256:edf62dca763b505f… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer