Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2024/08/08 10:41 a.m.82 views

Internet Bug Bounty: CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list()

CVE-2024-42005: Potential SQL injection in QuerySet.values and valueslist A vulnerability was discovered in Django where the QuerySet.values and valueslist methods on models with a JSONField were subject to SQL injection in column aliases via a crafted JSON object key as a passed argument...

9.8CVSS7.5AI score0.01503EPSS
SaveExploits0
Rows per page
Query Builder