CVE-2020-24584: 
Django vulnerability analysis and mitigation

A permission escalation vulnerability was discovered in Django versions 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 when using Python 3.7+. The vulnerability was disclosed on September 1, 2020, and affects the filesystem cache functionality of Django (Django Security).

The vulnerability occurs because the intermediate-level directories of the filesystem cache had the system's standard umask rather than the more restrictive 0o077 permission setting (no group or others permissions). This issue specifically manifests when Django is used with Python 3.7 or higher versions (Django Security, NVD).

A successful exploitation of this vulnerability could lead to disclosure of sensitive information and potential permission escalation in the intermediate-level directories of the file system cache. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) (NetApp Advisory).

The vulnerability requires network access and no authentication for exploitation. While there are no known exploits in the wild, the high CVSS score indicates the potential severity of the vulnerability (NetApp Advisory).

The issue has been fixed in Django versions 2.2.16, 3.0.10, and 3.1.1. Users should upgrade to these or later versions. Additionally, system administrators should review and manually fix permissions on existing intermediate-level directories (Django Security).