[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2021-3281":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":62,"references":67,"score":87,"epss_score":88,"epss_percentile":89,"is_kev":90,"cisa_kev_date_added":91,"cisa_kev_due_date":91,"cisa_ssvc":92,"attack_mappings":98,"exploits":105},294485,"CVE-2021-3281","EUVD-2021-0066","Django Directory Traversal via archive.extract\n\nIn Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by \"startapp --template\" and \"startproject --template\") allows directory traversal via an archive with absolute paths or relative paths with dot segments.","2021-03-18T20:29:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":18,"privilegesRequired":18,"confidentialityImpact":18},"UNCHANGED","3.1",5.3,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","LOW","NONE",true,[21],"CWE-22",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61],"cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.5:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.6:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.8:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.15:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.17:*:*:*:*:*:*:*","cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.9:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.7:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.13:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.9:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.1.4:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.8:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.4:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.10:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.16:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.2:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.1:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.3:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.14:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.11:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.11:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:2.2.10:*:*:*:*:*:*:*","cpe:2.3:a:djangoproject:django:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:django:django:*:*:*:*:*:*:*:*",[63,64,65,66],"Fedoraproject Fedora","Netapp Snapcenter","Djangoproject Django","Django Django",[68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86],"https:\u002F\u002Fdocs.djangoproject.com\u002Fen\u002F3.1\u002Freleases\u002Fsecurity\u002F","https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#%21forum\u002Fdjango-announce","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYF52FKEH5S2P5CM4X7IXSYG67YY2CDOO\u002F","https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210226-0004\u002F","https:\u002F\u002Fwww.djangoproject.com\u002Fweblog\u002F2021\u002Ffeb\u002F01\u002Fsecurity-releases\u002F","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2021-3281","https:\u002F\u002Fgithub.com\u002Fdjango\u002Fdjango\u002Fcommit\u002F02e6592835b4559909aa3aaaf67988fef435f624","https:\u002F\u002Fgithub.com\u002Fdjango\u002Fdjango\u002Fcommit\u002F05413afa8c18cdb978fcdf470e09f7a12b234a23","https:\u002F\u002Fgithub.com\u002Fdjango\u002Fdjango\u002Fcommit\u002F21e7622dec1f8612c85c2fc37fe8efbfd3311e37","https:\u002F\u002Fgithub.com\u002Fdjango\u002Fdjango\u002Fcommit\u002F52e409ed17287e9aabda847b6afe58be2fa9f86a","https:\u002F\u002Fdocs.djangoproject.com\u002Fen\u002F3.1\u002Freleases\u002F3.0.12","https:\u002F\u002Fdocs.djangoproject.com\u002Fen\u002F3.1\u002Freleases\u002Fsecurity","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fvgf-6h6h-3322","https:\u002F\u002Fgithub.com\u002Fdjango\u002Fdjango","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdjango\u002FPYSEC-2021-9.yaml","https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#!forum\u002Fdjango-announce","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYF52FKEH5S2P5CM4X7IXSYG67YY2CDOO","https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210226-0004","https:\u002F\u002Fwww.djangoproject.com\u002Fweblog\u002F2021\u002Ffeb\u002F01\u002Fsecurity-releases",0.47,0.07605,0.94507,false,null,{"timestamp":91,"automatable":93,"tech_impact":94,"exploitation":95,"cisa_decision":96,"cisa_remediation_timeline":97},"no","partial","none",{},"FSU",[99],{"name":100,"source":101,"tactics":102,"technique_id":104},"Exploit Public-Facing Application","attack_vector",[103],"initial-access","T1190",[]]