SQL Injection

🗓️ 05 Jul 2022 04:15:37Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 37 Views

django vulnerability to SQL injection via `Trunc()` and `Extract()` function

Reporter	Title	Published	Views	Family All 136
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.15-alt1	30 Aug 202200:00	–	altlinux
FreeBSD	Django -- multiple vulnerabilities	21 Jun 202200:00	–	freebsd
GithubExploit	Exploit for SQL Injection in Djangoproject Django	24 Aug 202207:29	–	githubexploit
GithubExploit	Exploit for SQL Injection in Djangoproject Django	7 Jul 202207:45	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	3 Apr 202018:47	–	githubexploit
AlpineLinux	CVE-2022-34265	4 Jul 202200:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
Circl	CVE-2022-34265	4 Jul 202211:18	–	circl
CNNVD	Django SQL注入漏洞	4 Jul 202200:00	–	cnnvd
CNVD	Django SQL Injection Vulnerability (CNVD-2022-49971)	7 Jul 202200:00	–	cnvd

Vulners

Node

google bionicMatch1:1.11.11-1ubuntu1.9debian

AND

google bionicMatch1:1.11.11-1ubuntu1debian

AND

google bionicMatch1:1.11.11-1ubuntu1.14debian

AND

debian debian_linux

py3-django py3-djangoMatch3.2.13-r0python

AND

alpinelinux alpine_linuxMatch3.16

py3-django py3-djangoMatch1.11.29-r0python

AND

py3-django py3-djangoMatch1.11.28-r0python

AND

py3-django py3-djangoMatch3.1.13-r1python

AND

py3-django py3-djangoMatch3.1.13-r0python

AND

py3-django py3-djangoMatch3.2.13-r0python

AND

py3-django py3-djangoMatch3.1.8-r0python

AND

py3-django py3-djangoMatch3.1.7-r0python

AND

py3-django py3-djangoMatch3.2.12-r0python

AND

py3-django py3-djangoMatch3.1.7-r1python

AND

alpinelinux alpine_linuxMatchedge

python-django python-djangoMatch1:1.11.29-1~deb10u1debian

AND

debian debian_linuxMatch10

django_project djangoRange1.8a1–3.2.13python

django_project djangoRange4.0a1–4.0.5python

python-django python-djangoMatch2.2.24_1.el8ui

python-django python-djangoMatch2.2.19_1.el8

python-django python-djangoMatch3.2.9_3.el8ui

python-django python-djangoMatch2.2.9_1.epel8.playground

python-django python-djangoMatch2.0.10_1.el8ost

python-django python-djangoMatch2.2.17_1.el8pc

python-django python-djangoMatch2.2.24_1.el8

python-django python-djangoMatch2.2.3_1.el8

python-django python-djangoMatch2.2.13_1.el8

python-django python-djangoMatch2.2.13_1.epel8.playground

python-django python-djangoMatch2.1.7_1.el8d

python-django python-djangoMatch2.2.9_1.el8

python-django python-djangoMatch2.1.11_1.el8ost

python-django python-djangoMatch3.2.13_4.el8pc

python-django python-djangoMatch2.2.3_1.epel8.playground

python-django python-djangoMatch3.2.13_2.el8ui

python-django python-djangoMatch3.2.7_4.el8pc

python-django python-djangoMatch3.2.13_1.el8pc

python-django python-djangoMatch2.2.17_1.el8

python-django python-djangoMatch3.2.14_1.el8pc

Source	Link
docs	www.docs.djangoproject.com/en/4.0/releases/security/
groups	www.groups.google.com/g/django-announce
djangoproject	www.djangoproject.com/weblog/2022/jul/04/security-releases/
github	www.github.com/django/django/commit/a9010fe5555e6086a9d9ae50069579400ef0685e
github	www.github.com/django/django/commit/0dc9c016fadb71a067e5a42be30164e3f96c0492
github	www.github.com/django/django/commit/284b188a4194e8fa5d72a73b09a869d7dd9f0dc5
debian	www.debian.org/security/2022/dsa-5254
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI/

07 Nov 2023 22:19Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.92834