SQL Injection

🗓️ 02 Aug 2019 01:12:17Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 22 Views

django vulnerability SQL injection in JSONField and HStoreFiel

Reporter	Title	Published	Views	Family All 70
ALT Linux	Security fix for the ALT Linux 9 package python3-module-django version 2.2.4-alt1	5 Aug 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 2.2.4-alt1	5 Aug 201900:00	–	altlinux
FreeBSD	Django -- multiple vulnerabilities	1 Aug 201900:00	–	freebsd
AlpineLinux	CVE-2019-14234	9 Aug 201912:16	–	alpinelinux
ArchLinux	[ASA-201908-2] python-django: multiple issues	5 Aug 201900:00	–	archlinux
ArchLinux	[ASA-201908-3] python2-django: multiple issues	5 Aug 201900:00	–	archlinux
BDU FSTEC	The vulnerabilities of the `django.contrib.postgres_fields.HStoreField` and `django.contrib.postgres_fields.JSONField` functions in the Django framework are related to the lack of measures to protect SQL query structures. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.	16 Oct 201900:00	–	bdu_fstec
Circl	CVE-2019-14234	4 Aug 201907:46	–	circl
CNVD	Django SQL Injection Vulnerability	5 Aug 201900:00	–	cnvd
CVE	CVE-2019-14234	9 Aug 201912:16	–	cve

Vulners

Node

django_project djangoRange2.2a1–2.2.3python

django_project djangoRange2.0a1–2.1.10python

django_project djangoRange1.9a1–1.11.22python

python-django python-djangoMatch2.1.7_1.el8d

python-django python-djangoMatch2.0.10_1.el8ost

python-django python-djangoMatch1.11.18_1.el7

python-django python-djangoMatch1.11.13_1.el7sat

python-django python-djangoMatch1.8.15_1.el7ost

python-django python-djangoMatch1.6.11_5.el7ost

python-django python-djangoMatch1.6.5_1.el7

python-django python-djangoMatch1.11.20_1.el7

python-django python-djangoMatch1.6.11_2.el7ost

python-django python-djangoMatch1.6.11_7.el7ost

python-django python-djangoMatch1.11.11_1.el7ost

python-django python-djangoMatch1.11.15_4.el7rhgs

python-django python-djangoMatch1.11.23_1.el7

python-django python-djangoMatch1.11.21_2.el7

python-django python-djangoMatch1.6.11_3.el7ost

python-django python-djangoMatch1.8.3_1.el7

python-django python-djangoMatch1.6.11_7.el7rhgs

python-django python-djangoMatch1.11.13_2.el7ost

python-django python-djangoMatch1.11.11_1.el7sat

python-django python-djangoMatch1.8.4_1.el7

python-django python-djangoMatch1.6.11_6.el7ost

python-django python-djangoMatch1.6.11_4.1.el7

python-django python-djangoMatch1.11.10_1.el7ost

python-django python-djangoMatch1.11.13_4.el7

python-django python-djangoMatch1.8.18_1.el7ost

python-django python-djangoMatch1.6.11_5.el7sat

python-django python-djangoMatch1.8.11_1.el7ost

python-django python-djangoMatch1.11.21_1.el7

python-django python-djangoMatch1.6.10_1.el7ui

python-django python-djangoMatch1.8.19_1.el7ost

python-django python-djangoMatch1.8.14_1.el7ost

python-django python-djangoMatch1.6.11_4.el7ost

python-django python-djangoMatch1.8.7_1.el7

python-django python-djangoMatch1.8.14_1.el7

Source	Link
github	www.github.com/django/django/commit/ed682a24fca774818542757651bfba576c3fc3ef
djangoproject	www.djangoproject.com/weblog/2019/aug/01/security-releases/
github	www.github.com/django/django/commit/f74b3ae3628c26e1b4f8db3d13a91d52a833a975
github	www.github.com/django/django/commit/4f5b58f5cd3c57fee9972ab074f8dc6895d8f387
seclists	www.seclists.org/bugtraq/2019/Aug/15
debian	www.debian.org/security/2019/dsa-4498
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK/
security	www.security.gentoo.org/glsa/202004-17
docs	www.docs.djangoproject.com/en/dev/releases/security/

08 Nov 2023 00:08Current

2.4Low risk

Vulners AI Score2.4

CVSS 27.5

CVSS 39.8

EPSS0.47694