SQL Injection in Django

🗓️ 13 Apr 2022 00:00:33Reported by GitHub Advisory DatabaseType

SQL Injection in Django version 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.

Reporter	Title	Published	Views	Family All 137
FreeBSD	Django -- multiple vulnerabilities	2 Apr 202200:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.13-alt1	12 Apr 202200:00	–	altlinux
AlpineLinux	CVE-2022-28347	12 Apr 202200:00	–	alpinelinux
ArchLinux	[ASA-202204-9] python-django: sql injection	12 Apr 202200:00	–	archlinux
BDU FSTEC	The vulnerability of the QuerySet.explain() function implementation in the Django web application framework allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	27 Apr 202200:00	–	bdu_fstec
Circl	CVE-2022-28347	12 Apr 202212:23	–	circl
CNNVD	Django SQL注入漏洞	11 Apr 202200:00	–	cnnvd
CNVD	Django SQL Injection Vulnerability (CNVD-2022-31837)	22 Apr 202200:00	–	cnvd
CVE	CVE-2022-28347	12 Apr 202200:00	–	cve
Cvelist	CVE-2022-28347	12 Apr 202200:00	–	cvelist

Vulners

Node

django_project djangoRange3.2–3.2.13pip

django_project djangoRange2.2–2.2.28pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-28347
groups	www.groups.google.com/forum/
openwall	www.openwall.com/lists/oss-security/2022/04/11/1
github	www.github.com/django/django/commit/6723a26e59b0b5429a0c5873941e01a2e1bdbb81
github	www.github.com/advisories/GHSA-w24h-v9qh-8gxj
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2022-191.yaml
debian	www.debian.org/security/2022/dsa-5254
github	www.github.com/django/django/commit/00b0fc50e1738c7174c495464a5ef069408a4402
github	www.github.com/django/django/commit/29a6c98b4c13af82064f993f0acc6e8fafa4d3f5
github	www.github.com/django/django/commit/9e19accb6e0a00ba77d5a95a91675bf18877c72d

20 Sep 2024 15:09Current

9.5High risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8

EPSS0.00748