Lucene search
+L

2 matches found

SUSE Linux
SUSE Linux
added 2024/12/11 8:30 a.m.6 views

Security update for python-Django

This update for python-Django fixes the following issues: CVE-2024-53907: Fixed denial-of-service in django.utils.html.striptags bsc1234232 CVE-2024-53908: Fixed SQL injection in HasKeylhs, rhs on Oracle bsc1234231 Patch Instructions: To install this SUSE update use the SUSE recommended...

9.1CVSS7.9AI score0.01424EPSS
SaveExploits0References8
Hacker One
Hacker One
added 2024/12/05 9:51 a.m.172 views

Internet Bug Bounty: CVE-2024-53908: Django Potential SQL injection in `HasKey(lhs, rhs)` on Oracle

CVE-2024-53908: Django potential SQL injection in HasKeylhs, rhs on Oracle was reported. The vulnerability was found in the direct usage of the django.db.models.fields.json.HasKey lookup on Oracle databases when untrusted data was used as an lhs value. Applications that used the jsonfield.haskey...

9.8CVSS7.5AI score0.01424EPSS
SaveExploits0
Rows per page
Query Builder