Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2022-34265

🗓️ 04 Jul 2022 00:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 314 Views🌐 WEB

An SQL injection issue in Django 3.2 and 4.0 versions

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
altlinux
ALT Linux		Security fix for the ALT Linux 10 package python3-module-django version 3.2.15-alt1
30 Aug 202200:00
–altlinux
freebsd
FreeBSD		Django -- multiple vulnerabilities
21 Jun 202200:00
–freebsd
githubexploit
GithubExploit		Exploit for SQL Injection in Djangoproject Django
24 Aug 202207:29
–githubexploit
githubexploit
GithubExploit		Exploit for SQL Injection in Djangoproject Django
7 Jul 202207:45
–githubexploit
githubexploit
GithubExploit		Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
3 Apr 202018:47
–githubexploit
alpinelinux
AlpineLinux		CVE-2022-34265
4 Jul 202200:00
–alpinelinux
astralinux
AstraLinux		Astra Linux – Vulnerability in Python-Django
15 Oct 202615:53
–astralinux
bdu_fstec
BDU FSTEC		Django Trunc Extract Function
8 Jul 202200:00
–bdu_fstec
nessus
Tenable Nessus		Rocky Linux 8 [CIQ] Security Update: libdb-cxx / libdb-cxx-debuginfo / libdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_8506)
1 Oct 202600:00
–nessus
nessus
Tenable Nessus		Debian dla-3164 : python-django - security update
28 Oct 202200:00
–nessus
Rows per page
NVD
Node
OR
djangoprojectdjangoRange3.2–3.2.14
djangoprojectdjangoRange4.0–4.0.6
ParameterPositionPathDescriptionCWE
lookup_namequery param/extract/SQL injection vulnerability in the Extract() database function when untrusted data is used as a lookup_name value.CWE-89
kindquery param/trunc/SQL injection vulnerability in the Trunc() database function when untrusted data is used as a kind value.CWE-89

CyberNe79425560

Tracked as CVE-2022-34265, the potential SQL Injection vulnerability impacts Django's main branch, and versions 4.1 (currently in beta), 4.0, and 3.2, with patches and new releases issued that squash the vulnerability.

vigilance_en

Vigil@nce #Vulnerability of Django: SQL injection via Trunc/Extract. https://t.co/TOqwvG1jjP Identifiers: #CVE-2022-34265. #infosec

SecBe4

Beware of Django SQL Injection Vulnerability CVE-2022-34265 #Security #infosec

RemotelyAlerts

Severity: | An issue was discovered in Django 3.2 be... | CVE-2022-34265 | Link for more: https://t.co/nx6whBC8og

phithon_xg

Django Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments (CVE-2022-34265) #Vulhub https://t.co/VAAzcFfBZy

threatintelctr

NEW: CVE-2022-34265 An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup... (click for more) Severity: CRITICAL https://t.co/l4I2yzrFNc

Dinosn

CVE-2022-34265 Django SQL Injection Vulnerability Analysis https://t.co/IMeJJJ6EEt

threatintelctr

NEW: CVE-2022-34265 An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup... (click for more) Severity: CRITICAL https://t.co/l4I2yzrFNc

WolfgangSesin

New post from https://t.co/uXvPWJy6tj (CVE-2022-34265 (django)) has been published on https://t.co/wXNQZempuR

www_sesin_at

New post from https://t.co/9KYxtdZjkl (CVE-2022-34265 (django)) has been published on https://t.co/1Hptvrd7HB

Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a demo
17 Jun 2026 04:50Current
9.5Critical risk
Vulners AI Score9.5
CVSS 27.5
CVSS 3.19.8
EPSS0.73607
CWE-89
cve-2022-34265djangosql injectionsecurity vulnerabilitynvd
314