44 matches found
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 1.2 security update
An update is now available for Red Hat Ansible Automation Platform 1.2 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Moderate: Red Hat Security Advisory: Satellite 6.11 Release
An update is now available for Red Hat Satellite 6.11 Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool. Security Fixes: libsolv: Heap-based buff...
Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update
An update for python-django20 is now available for Red Hat OpenStack Platform 16.2.3 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Mageia: Security Advisory (MGASA-2022-0190)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Django < 2.2.28, 3.x < 3.2.13, 4.x < 4.0.4 Multiple Vulnerabilities - Linux
Django is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Exploit for SQL Injection in Djangoproject Django
CVE-2022-28346 Django QuerySet.annotate, aggregate, extr...
Debian DLA-2982-1 : python-django - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2982 advisory. - An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate, aggregate, and extra methods are subject to SQL injection...
CVE-2022-28346
creationtimestamp| type| source ---|---|--- 2022-04-12 12:23:00+00:00| seen| https://t.me/cibsecurity/40586 2022-04-29 07:55:52+00:00| published-proof-of-concept| https://t.me/ShlezySecChannel/30 2022-04-29 10:51:05+00:00| published-proof-of-concept| https://t.me/crackcodes/498 2022-04-29...
Ubuntu: Security Advisory (USN-5373-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security fix for the ALT Linux 10 package python3-module-django version 3.2.13-alt1
3.2.13-alt1 built April 12, 2022 Anton Farygin in task 298294 April 11, 2022 Anton Farygin - 3.2.12 - 3.2.13 - Fixes: CVE-2022-28346: Potential SQL injection in QuerySet.annotate, aggregate, and extra CVE-2022-28347: Potential SQL injection via QuerySet.explainoptions on PostgreSQL...
FreeBSD : Django -- multiple vulnerabilities (0db46f84-b9fa-11ec-89df-080027240888)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 0db46f84-b9fa-11ec-89df-080027240888 advisory. - A SQL injection issue was discovered in QuerySet.explain in Django 2.2 before 2.2.28, 3.2...
[ASA-202204-9] python-django: sql injection
Arch Linux Security Advisory ASA-202204-9 ========================================= Severity: High Date : 2022-04-12 CVE-ID : CVE-2022-28346 CVE-2022-28347 Package : python-django Type : sql injection Remote : Yes Link : https://security.archlinux.org/AVG-2667 Summary ======= The package...
CVE-2022-28346
CVE-2022-28346 affects Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. The vulnerability is a SQL injection in column aliases via QuerySet.annotate(), aggregate(), and extra() when a crafted dictionary with dictionary expansion is passed as kwargs. Impact is partial to high dep...
USN-5373-2: Django vulnerabilities
USN-5373-1 fixed several vulnerabilities in Django. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Django incorrectly handled certain certain column aliases in the QuerySet.annotate, aggregate, and extra...
USN-5373-1: Django vulnerabilities
It was discovered that Django incorrectly handled certain certain column aliases in the QuerySet.annotate, aggregate, and extra methods. A remote attacker could possibly use this issue to perform an SQL injection attack. CVE-2022-28346 It was discovered that Django incorrectly handled certain...
Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerabilities (USN-5373-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5373-1 advisory. It was discovered that Django incorrectly handled certain certain column aliases in the QuerySet.annotate, aggregate, and extra methods. A...
CVE-2021-28346
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2021-28346
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2021-28346
Technical details about CVE-2021-28346 are not provided in the supplied documents. Monitor for updates from official advisories; no affected product/version/root-cause/mitigation details are present here.
