EyalgabayH1:2646493Internet Bug Bounty: CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list()
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
Hi IBB :)
I found SQL injection in django.
you can see my cve (CVE-2024-42005) here:
https://www.djangoproject.com/weblog/2024/aug/06/security-releases/
Impact
QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.
NVD rated the vulnerability sevirity as 9.8.
https://nvd.nist.gov/vuln/detail/CVE-2024-42005
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low