Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-28346

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.

Published

2022-04-12T05:15:06.927

Last Modified

2024-11-21T06:57:11.007

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application djangoproject django < 2.2.28 Yes
Application djangoproject django < 3.2.13 Yes
Application djangoproject django < 4.0.4 Yes
Operating System debian debian_linux 9.0 Yes
Operating System debian debian_linux 11.0 Yes
References