SQL Injection

🗓️ 08 Aug 2024 07:53:38Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 14 Views

Django SQL injection vulnerability in QuerySet function

Reporter	Title	Published	Views	Family All 88
IBM Security Bulletins	Security Bulletin: Denial of service and SQL injection might affect IBM Storage Defender – Resiliency Service	23 Sep 202416:44	–	ibm
FreeBSD	Django -- multiple vulnerabilities	1 Aug 202400:00	–	freebsd
AlpineLinux	CVE-2024-42005	7 Aug 202400:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
Circl	CVE-2024-42005	7 Aug 202417:48	–	circl
CNNVD	Django SQL注入漏洞	6 Aug 202400:00	–	cnnvd
CVE	CVE-2024-42005	7 Aug 202400:00	–	cve
Cvelist	CVE-2024-42005	7 Aug 202400:00	–	cvelist
Debian	[SECURITY] [DLA 4458-1] python-django security update	28 Jan 202621:46	–	debian
Debian	[SECURITY] [DSA 6136-1] python-django security update	15 Feb 202621:52	–	debian

Vulners

Node

py3-django py3-djangoMatch4.2.10-r0python

AND

py3-django py3-djangoMatch3.2.15-r0python

AND

py3-django py3-djangoMatch4.2.12-r0python

AND

py3-django py3-djangoMatch3.2.16-r1python

AND

py3-django py3-djangoMatch4.2.6-r0python

AND

py3-django py3-djangoMatch4.2.3-r0python

AND

py3-django py3-djangoMatch3.2.17-r0python

AND

py3-django py3-djangoMatch3.1.13-r1python

AND

py3-django py3-djangoMatch4.2.1-r0python

AND

py3-django py3-djangoMatch4.2-r1python

AND

py3-django py3-djangoMatch3.1.13-r0python

AND

py3-django py3-djangoMatch4.2.11-r1python

AND

py3-django py3-djangoMatch3.1.7-r1python

AND

py3-django py3-djangoMatch3.2.18-r1python

AND

py3-django py3-djangoMatch4.2.5-r0python

AND

py3-django py3-djangoMatch3.2.18-r0python

AND

py3-django py3-djangoMatch3.2.13-r0python

AND

py3-django py3-djangoMatch3.2.16-r0python

AND

py3-django py3-djangoMatch3.2.14-r0python

AND

py3-django py3-djangoMatch3.1.7-r0python

AND

py3-django py3-djangoMatch3.2.12-r0python

AND

py3-django py3-djangoMatch4.2.11-r0python

AND

py3-django py3-djangoMatch4.2.2-r0python

AND

py3-django py3-djangoMatch1.11.28-r0python

AND

py3-django py3-djangoMatch1.11.29-r0python

AND

py3-django py3-djangoMatch4.2-r0python

AND

py3-django py3-djangoMatch4.2.7-r0python

AND

py3-django py3-djangoMatch3.1.8-r0python

AND

alpinelinux alpine_linuxMatchedge

OR

py3-django py3-djangoMatch4.2.12-r0python

AND

alpinelinux alpine_linuxMatch3.20

OR

django_project djangoRange5.0–5.0.7python

OR

django_project djangoRange4.2a1–4.2.14python

Source	Link
github	www.github.com/django/django/commit/32ebcbf2e1fe3e5ba79a6554a167efce81f7422d
github	www.github.com/django/django/commit/f4af67b9b41e0f4c117a8741da3abbd1c869ab28
djangoproject	www.djangoproject.com/weblog/2024/aug/06/security-releases
docs	www.docs.djangoproject.com/en/dev/releases/security
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-70.yaml
github	www.github.com/advisories/GHSA-pv4p-cwwg-4rph
docs	www.docs.djangoproject.com/en/dev/releases/security/
groups	www.groups.google.com/forum/
djangoproject	www.djangoproject.com/weblog/2024/aug/06/security-releases/

23 Oct 2024 20:39Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.3 - 9.8

EPSS0.00328

SSVC

django sql injection queryset jsonfield security vulnerability