Lucene search

Django -- potential SQL injection vulnerability

🗓️ 25 Feb 2020 00:00:00Reported by FreeBSDType

Django SQL injection vulnerability in GIS functions and aggregates on Oracl

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 45
Cvelist	CVE-2020-9402	5 Mar 202014:49	–	cvelist
UbuntuCve	CVE-2020-9402	4 Mar 202000:00	–	ubuntucve
Github Security Blog	SQL injection in Django	5 Jun 202014:52	–	github
OSV	CVE-2020-9402	5 Mar 202015:15	–	osv
OSV	SQL injection in Django	5 Jun 202014:52	–	osv
OSV	PYSEC-2020-36	5 Mar 202015:15	–	osv
OSV	BIT-django-2020-9402	6 Mar 202410:55	–	osv
OSV	python-django - security update	26 May 202200:00	–	osv
OSV	RHSA-2021:1313 Red Hat Security Advisory: Satellite 6.9 Release	29 Sep 202417:48	–	osv
OSV	OPENSUSE-SU-2024:11205-1 python36-Django-3.2.7-2.3 on GA media	15 Jun 202400:00	–	osv

Source	Link
djangoproject	www.djangoproject.com/weblog/2020/mar/04/security-releases/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

OS	OS Version	Architecture	Package	Package Version	Filename
FreeBSD	any	noarch	py27-django111	1.11.29	UNKNOWN
FreeBSD	any	noarch	py35-django111	1.11.29	UNKNOWN
FreeBSD	any	noarch	py36-django111	1.11.29	UNKNOWN
FreeBSD	any	noarch	py37-django111	1.11.29	UNKNOWN
FreeBSD	any	noarch	py38-django111	1.11.29	UNKNOWN
FreeBSD	any	noarch	py35-django22	2.2.11	UNKNOWN
FreeBSD	any	noarch	py36-django22	2.2.11	UNKNOWN
FreeBSD	any	noarch	py37-django22	2.2.11	UNKNOWN
FreeBSD	any	noarch	py38-django22	2.2.11	UNKNOWN
FreeBSD	any	noarch	py36-django30	3.0.4	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Feb 2020 00:00Current

2.9Low risk

Vulners AI Score2.9

CVSS26.5

CVSS38.8

EPSS0.54822