SQL Injection in Django

🗓️ 22 Sep 2021 17:34:49Reported by GitHub Advisory DatabaseType

Django SQL Injection Risk in Versions 3.1.x and 3.2.x

Reporter	Title	Published	Views	Family All 92
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.6-alt1	10 Sep 202100:00	–	altlinux
GithubExploit	Exploit for SQL Injection in Djangoproject Django	24 Sep 202115:30	–	githubexploit
AlpineLinux	CVE-2021-35042	2 Jul 202109:54	–	alpinelinux
ArchLinux	[ASA-202107-11] python-django: insufficient validation	3 Jul 202100:00	–	archlinux
Circl	CVE-2021-35042	11 Jul 202113:57	–	circl
CNNVD	Django SQL注入漏洞	1 Jul 202100:00	–	cnnvd
CNVD	Django SQL Injection Vulnerability (CNVD-2021-49046)	2 Jul 202100:00	–	cnvd
CVE	CVE-2021-35042	2 Jul 202109:54	–	cve
Cvelist	CVE-2021-35042	2 Jul 202109:54	–	cvelist
Debian CVE	CVE-2021-35042	2 Jul 202109:54	–	debiancve

Vulners

Node

django_project djangoRange3.0a1–3.1.13pip

django_project djangoRange3.2a1–3.2.5pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-35042
groups	www.groups.google.com/forum/
openwall	www.openwall.com/lists/oss-security/2021/07/02/2
github	www.github.com/django/django/commit/0bd57a879a0d54920bb9038a732645fb917040e9
github	www.github.com/django/django/commit/a34a5f724c5d5adb2109374ba3989ebb7b11f81f
github	www.github.com/django/django/commit/dae83a24519d6f284c74414e0b81d64d9b5a0db4
docs	www.docs.djangoproject.com/en/3.2/releases/security
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SS6NJTBYWOX6J7G4U3LUOILARJKWPQ5Y
security	www.security.netapp.com/advisory/ntap-20210805-0008
djangoproject	www.djangoproject.com/weblog/2021/jul/01/security-releases

20 Sep 2024 15:12Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8

EPSS0.909