CVE-2024-39330 is a directory traversal vulnerability in Django versions 5.0 before 5.0.7 and 4.2 before 4.2.14. It affects derived classes of the django.core.files.storage.Storage base class that override generate_filename() without replicating the parent class's file-path validations. This flaw can allow an attacker to perform directory traversal during a save() call. Built-in Storage subclasses are not affected. The issue has been fixed in Django 5.0.7 and 4.2.14.