1 matches found
Django QuerySet JSONField Code Execution
The vulnerability of the QuerySet.values and valueslist methods of the Django web application’s JSONField model is related to the lack of security measures for handling SQL queries. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted SQL query...
10CVSS7.4AI score0.01503EPSS
SaveExploits0References8Affected Software4
20