Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.15-py3-none-any.whl CVE-2024-45231

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.15-py3-none-any.whl CVE-2024-45231. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-45231 DESCRIPTION: Django could allow a remote attacker to obtai...

Security Bulletin: Denial of service, SQL injection, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service

Summary IBM Storage Defender – Resiliency Service is vulnerable to denial of service, SQL injection, and others. The vulnerabilities have been addressed. CVE-2023-52425, CVE-2024-53908, CVE-2024-53907, CVE-2023-52426, CVE-2022-29162, CVE-2023-25809, CVE-2023-27561, CVE-2023-28642, CVE-2024-21626,...

openSUSE Security Advisory (SUSE-SU-2024:4285-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

python310-Django-5.1.4-1.1 on GA media (moderate)

python310-Django-5.1.4-1.1 on GA media Announcement ID: openSUSE-SU-2024:14568-1 Rating: moderate Cross-References: CVE-2024-53907 CVE-2024-53908 CVSS scores: CVE-2024-53907 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-53908 SUSE : 9.1...

python310-Django4-4.2.17-1.1 on GA media (moderate)

python310-Django4-4.2.17-1.1 on GA media Announcement ID: openSUSE-SU-2024:14565-1 Rating: moderate Cross-References: CVE-2024-53907 CVE-2024-53908 CVSS scores: CVE-2024-53907 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-53908 SUSE : 9.1...

Django 4.x < 4.2.17, 5.0.x < 5.0.10, 5.1.x < 5.1.4 Multiple Vulnerabilities - Windows

Django is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if descriptio...

Django 4.x < 4.2.17, 5.0.x < 5.0.10, 5.1.x < 5.1.4 Multiple Vulnerabilities - Linux

Django is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if descriptio...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +137 more potentially affected by CVE-2024-53908 via django (>=4.2.0, <=4.2.16)

django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =0.4.0, =4.16.2, =4.8.0, =0.1.0, =0.138.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:GHSA-M9G8-FXXM-XG86...

bma (0.2.0a1), chromatrace (>=0.1.6, <=0.1.7) +30 more potentially affected by CVE-2024-53908 via django (>=5.1.0, <=5.1.3)

django PYPI version =5.1.0, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.0.86, =0.1.0, =5.1.0, =5.1.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:GHSA-M9G8-FXXM-XG86...

aldryn-django (5.0.2.0), artd-customer (>=0.0.20, <=0.0.23) +77 more potentially affected by CVE-2024-53908 via django (>=5.0.0, <=5.0.9)

django PYPI version =5.0.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:GHSA-M9G8-FXXM-XG86...

bma (0.2.0a1), chromatrace (>=0.1.6, <=0.1.7) +30 more potentially affected by CVE-2024-53908 via django (>=5.1.0, <=5.1.3)

django PYPI version =5.1.0, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.0.86, =0.1.0, =5.1.0, =5.1.3 and more Source cves: CVE-2024-53908 Source advisory: GHSA-M9G8-FXXM-XG86...

aldryn-django (5.0.2.0), artd-customer (>=0.0.20, <=0.0.23) +77 more potentially affected by CVE-2024-53908 via django (>=5.0.0, <=5.0.9)

django PYPI version =5.0.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:PYSEC-2024-157...

bma (0.2.0a1), chromatrace (>=0.1.6, <=0.1.7) +30 more potentially affected by CVE-2024-53908 via django (>=5.1.0, <=5.1.3)

django PYPI version =5.1.0, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.0.86, =0.1.0, =5.1.0, =5.1.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:PYSEC-2024-157...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +137 more potentially affected by CVE-2024-53908 via django (>=4.2.0, <=4.2.16)

django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =0.4.0, =4.16.2, =4.8.0, =0.1.0, =0.138.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:PYSEC-2024-157...

CVE-2024-53908 vulnerabilities

Vulnerabilities for packages: py3-django...

CVE-2024-53908 vulnerabilities

Vulnerabilities for packages: py3-django, awx...

SUSE CVE-2024-53908

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...

CVE-2024-53908

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...

aldryn-django (5.0.2.0), artd-customer (>=0.0.20, <=0.0.23) +77 more potentially affected by CVE-2024-53908 via django (>=5.0.0, <=5.0.9)

django PYPI version =5.0.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-53908 Source advisory: MEND:CVE-2024-53908...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +137 more potentially affected by CVE-2024-53908 via django (>=4.2.0, <=4.2.16)

django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =0.4.0, =4.16.2, =4.8.0, =0.1.0, =0.138.3 and more Source cves: CVE-2024-53908 Source advisory: MEND:CVE-2024-53908...