How I Chained Directory Traversal and CSV Parser Abuse for RCE in a Django App (jineeshak.github.io)
from Penguincoder@beehaw.org to technology@beehaw.org on 01 Jul 14:15
https://beehaw.org/post/20877499

Interesting exploit and a nice writeup of the process.

#technology