SQL Injection in Django

🗓️ 13 Apr 2022 00:00:33Reported by GitHub Advisory DatabaseType

SQL Injection in Django - Issue in QuerySet method

Reporter	Title	Published	Views	Family All 170
FreeBSD	Django -- multiple vulnerabilities	2 Apr 202200:00	–	freebsd
GithubExploit	Exploit for SQL Injection in Djangoproject Django	26 Apr 202214:47	–	githubexploit
GithubExploit	Exploit for SQL Injection in Djangoproject Django	19 Jan 202400:15	–	githubexploit
GithubExploit	Exploit for SQL Injection in Djangoproject Django	15 May 202200:24	–	githubexploit
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.13-alt1	12 Apr 202200:00	–	altlinux
AlpineLinux	CVE-2022-28346	12 Apr 202200:00	–	alpinelinux
ArchLinux	[ASA-202204-9] python-django: sql injection	12 Apr 202200:00	–	archlinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
Circl	CVE-2022-28346	12 Apr 202212:23	–	circl
CNNVD	Django SQL注入漏洞	11 Apr 202200:00	–	cnnvd

Vulners

Node

django_project djangoRange3.2–3.2.13pip

django_project djangoRange2.2–2.2.28pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-28346
groups	www.groups.google.com/forum/
openwall	www.openwall.com/lists/oss-security/2022/04/11/1
lists	www.lists.debian.org/debian-lts-announce/2022/04/msg00013.html
github	www.github.com/django/django/commit/93cae5cb2f9a4ef1514cf1a41f714fef08005200
github	www.github.com/advisories/GHSA-2gwj-7jmv-h26r
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2022-190.yaml
debian	www.debian.org/security/2022/dsa-5254
github	www.github.com/django/django/commit/2044dac5c6968441be6f534c4139bcf48c5c7e48
github	www.github.com/django/django/commit/2c09e68ec911919360d5f8502cefc312f9e03c5d

20 Sep 2024 15:09Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

EPSS0.01971