Lucene search

MitreCVE-2021-30459

HistoryApr 14, 2021 - 6:15 p.m.

CVE-2021-30459

2021-04-1418:15:14

CWE-89

mitre

web.nvd.nist.gov

cve-2021-30459

sql injection

jazzband django debug toolbar

security vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

56.5%

JSON

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input field of the SQL explain, analyze, or select form.

Affected configurations

Nvd

Node

jazzbanddjango_debug_toolbarRange0.10.0–1.11.1

jazzbanddjango_debug_toolbarRange2.0.0–2.2.1

jazzbanddjango_debug_toolbarRange3.0.0–3.2.1

VendorProductVersionCPE
jazzbanddjango_debug_toolbar*cpe:2.3:a:jazzband:django_debug_toolbar:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jazzband	django_debug_toolbar	*	cpe:2.3:a:jazzband:django_debug_toolbar::::::::

References

github.com/jazzband/django-debug-toolbar/releases

github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gj

www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases/

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

56.5%

JSON

Related for CVE-2021-30459