CVE-2021-45452 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-45452 Interim 1 20 2026-03-05T05:12:01Z current 2022-01-12T02:12:22Z 2026-03-05T05:12:01Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-45452 Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2022-January/010010.html E-Mail link for SUSE-SU-2022:0102-1 https://lists.suse.com/pipermail/sle-security-updates/2022-January/010016.html E-Mail link for SUSE-SU-2022:0103-1 https://lists.suse.com/pipermail/sle-security-updates/2022-February/010163.html E-Mail link for SUSE-SU-2022:0286-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UHF5IZKTZ2T4T4QQYZMUFHW422X3WCU6/ E-Mail link for openSUSE-SU-2023:0005-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 SUSE Package Hub 15 SP3 openSUSE Leap 15.3 openSUSE Tumbleweed python-Django-1.11.29-3.39.1 python-Django1-1.11.29-3.30.1 python3-Django-2.2.28-bp153.2.3.1 python310-Django-4.0.1-1.1 python310-Django4-4.2.14-1.1 python311-Django-5.1.5-1.1 python311-Django4-4.2.14-1.1 python312-Django-5.1.5-1.1 python312-Django4-4.2.14-1.1 python312-Django6-6.0-1.1 python313-Django-5.1.5-1.1 python313-Django6-6.0-1.1 python38-Django-4.0.1-1.1 python39-Django-4.0.1-1.1 venv-openstack-aodh-x86_64-5.1.1~dev7-12.37.1 venv-openstack-barbican-x86_64-5.0.2~dev3-12.38.1 venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.35.1 venv-openstack-cinder-x86_64-11.2.3~dev29-14.39.1 venv-openstack-designate-x86_64-5.0.3~dev7-12.36.1 venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.33.1 venv-openstack-glance-x86_64-15.0.3~dev3-12.36.1 venv-openstack-heat-x86_64-9.0.8~dev22-12.40.1 venv-openstack-horizon-hpe-x86_64-12.0.5~dev6-14.43.2 venv-openstack-horizon-x86_64-12.0.5~dev6-14.43.2 venv-openstack-ironic-x86_64-9.1.8~dev8-12.38.1 venv-openstack-keystone-x86_64-12.0.4~dev11-11.40.1 venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.37.1 venv-openstack-manila-x86_64-5.1.1~dev5-12.42.1 venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.33.1 venv-openstack-monasca-x86_64-2.2.2~dev1-11.40.1 venv-openstack-murano-x86_64-4.0.2~dev2-12.33.1 venv-openstack-neutron-x86_64-11.0.9~dev69-13.43.1 venv-openstack-nova-x86_64-16.1.9~dev92-11.41.1 venv-openstack-octavia-x86_64-1.0.6~dev3-12.38.1 venv-openstack-sahara-x86_64-7.0.5~dev4-11.37.1 venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.28.1 venv-openstack-trove-x86_64-8.0.2~dev2-11.37.1 python-Django-1.11.29-3.39.1 as a component of HPE Helion OpenStack 8 venv-openstack-aodh-x86_64-5.1.1~dev7-12.37.1 as a component of HPE Helion OpenStack 8 venv-openstack-barbican-x86_64-5.0.2~dev3-12.38.1 as a component of HPE Helion OpenStack 8 venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.35.1 as a component of HPE Helion OpenStack 8 venv-openstack-cinder-x86_64-11.2.3~dev29-14.39.1 as a component of HPE Helion OpenStack 8 venv-openstack-designate-x86_64-5.0.3~dev7-12.36.1 as a component of HPE Helion OpenStack 8 venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.33.1 as a component of HPE Helion OpenStack 8 venv-openstack-glance-x86_64-15.0.3~dev3-12.36.1 as a component of HPE Helion OpenStack 8 venv-openstack-heat-x86_64-9.0.8~dev22-12.40.1 as a component of HPE Helion OpenStack 8 venv-openstack-horizon-hpe-x86_64-12.0.5~dev6-14.43.2 as a component of HPE Helion OpenStack 8 venv-openstack-ironic-x86_64-9.1.8~dev8-12.38.1 as a component of HPE Helion OpenStack 8 venv-openstack-keystone-x86_64-12.0.4~dev11-11.40.1 as a component of HPE Helion OpenStack 8 venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.37.1 as a component of HPE Helion OpenStack 8 venv-openstack-manila-x86_64-5.1.1~dev5-12.42.1 as a component of HPE Helion OpenStack 8 venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.33.1 as a component of HPE Helion OpenStack 8 venv-openstack-monasca-x86_64-2.2.2~dev1-11.40.1 as a component of HPE Helion OpenStack 8 venv-openstack-murano-x86_64-4.0.2~dev2-12.33.1 as a component of HPE Helion OpenStack 8 venv-openstack-neutron-x86_64-11.0.9~dev69-13.43.1 as a component of HPE Helion OpenStack 8 venv-openstack-nova-x86_64-16.1.9~dev92-11.41.1 as a component of HPE Helion OpenStack 8 venv-openstack-octavia-x86_64-1.0.6~dev3-12.38.1 as a component of HPE Helion OpenStack 8 venv-openstack-sahara-x86_64-7.0.5~dev4-11.37.1 as a component of HPE Helion OpenStack 8 venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.28.1 as a component of HPE Helion OpenStack 8 venv-openstack-trove-x86_64-8.0.2~dev2-11.37.1 as a component of HPE Helion OpenStack 8 python-Django-1.11.29-3.39.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-aodh-x86_64-5.1.1~dev7-12.37.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-barbican-x86_64-5.0.2~dev3-12.38.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.35.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-cinder-x86_64-11.2.3~dev29-14.39.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-designate-x86_64-5.0.3~dev7-12.36.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.33.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-glance-x86_64-15.0.3~dev3-12.36.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-heat-x86_64-9.0.8~dev22-12.40.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-horizon-x86_64-12.0.5~dev6-14.43.2 as a component of SUSE OpenStack Cloud 8 venv-openstack-ironic-x86_64-9.1.8~dev8-12.38.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-keystone-x86_64-12.0.4~dev11-11.40.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.37.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-manila-x86_64-5.1.1~dev5-12.42.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.33.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-monasca-x86_64-2.2.2~dev1-11.40.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-murano-x86_64-4.0.2~dev2-12.33.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-neutron-x86_64-11.0.9~dev69-13.43.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-nova-x86_64-16.1.9~dev92-11.41.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-octavia-x86_64-1.0.6~dev3-12.38.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-sahara-x86_64-7.0.5~dev4-11.37.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.28.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-trove-x86_64-8.0.2~dev2-11.37.1 as a component of SUSE OpenStack Cloud 8 python-Django1-1.11.29-3.30.1 as a component of SUSE OpenStack Cloud 9 python-Django-1.11.29-3.39.1 as a component of SUSE OpenStack Cloud Crowbar 8 python-Django1-1.11.29-3.30.1 as a component of SUSE OpenStack Cloud Crowbar 9 python3-Django-2.2.28-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 python3-Django-2.2.28-bp153.2.3.1 as a component of openSUSE Leap 15.3 python310-Django-4.0.1-1.1 as a component of openSUSE Tumbleweed python310-Django4-4.2.14-1.1 as a component of openSUSE Tumbleweed python311-Django-5.1.5-1.1 as a component of openSUSE Tumbleweed python311-Django4-4.2.14-1.1 as a component of openSUSE Tumbleweed python312-Django-5.1.5-1.1 as a component of openSUSE Tumbleweed python312-Django4-4.2.14-1.1 as a component of openSUSE Tumbleweed python312-Django6-6.0-1.1 as a component of openSUSE Tumbleweed python313-Django-5.1.5-1.1 as a component of openSUSE Tumbleweed python313-Django6-6.0-1.1 as a component of openSUSE Tumbleweed python38-Django-4.0.1-1.1 as a component of openSUSE Tumbleweed python39-Django-4.0.1-1.1 as a component of openSUSE Tumbleweed Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it. CVE-2021-45452 HPE Helion OpenStack 8:python-Django-1.11.29-3.39.1 HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.37.1 HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.38.1 HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.35.1 HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev29-14.39.1 HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.36.1 HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.33.1 HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.36.1 HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.40.1 HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev6-14.43.2 HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.38.1 HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev11-11.40.1 HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.37.1 HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev5-12.42.1 HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.33.1 HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.40.1 HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.33.1 HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev69-13.43.1 HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev92-11.41.1 HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.38.1 HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.37.1 HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.28.1 HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.37.1 SUSE OpenStack Cloud 8:python-Django-1.11.29-3.39.1 SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.37.1 SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.38.1 SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.35.1 SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev29-14.39.1 SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.36.1 SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.33.1 SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.36.1 SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.40.1 SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev6-14.43.2 SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.38.1 SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev11-11.40.1 SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.37.1 SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev5-12.42.1 SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.33.1 SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.40.1 SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.33.1 SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev69-13.43.1 SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev92-11.41.1 SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.38.1 SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.37.1 SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.28.1 SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.37.1 SUSE OpenStack Cloud 9:python-Django1-1.11.29-3.30.1 SUSE OpenStack Cloud Crowbar 8:python-Django-1.11.29-3.39.1 SUSE OpenStack Cloud Crowbar 9:python-Django1-1.11.29-3.30.1 SUSE Package Hub 15 SP3:python3-Django-2.2.28-bp153.2.3.1 openSUSE Leap 15.3:python3-Django-2.2.28-bp153.2.3.1 openSUSE Tumbleweed:python310-Django-4.0.1-1.1 openSUSE Tumbleweed:python310-Django4-4.2.14-1.1 openSUSE Tumbleweed:python311-Django-5.1.5-1.1 openSUSE Tumbleweed:python311-Django4-4.2.14-1.1 openSUSE Tumbleweed:python312-Django-5.1.5-1.1 openSUSE Tumbleweed:python312-Django4-4.2.14-1.1 openSUSE Tumbleweed:python312-Django6-6.0-1.1 openSUSE Tumbleweed:python313-Django-5.1.5-1.1 openSUSE Tumbleweed:python313-Django6-6.0-1.1 openSUSE Tumbleweed:python38-Django-4.0.1-1.1 openSUSE Tumbleweed:python39-Django-4.0.1-1.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N