Поиск уязвимостей
Количество 17
Количество 17
ROS-20220516-04
Множественные уязвимости Django
ALT-PU-2022-1677
ALT-PU-2022-1677: package `python3-module-django` update to version 3.2.13-alt1
ALT-PU-2022-1670
ALT-PU-2022-1670: package `python3-module-django` update to version 3.2.13-alt1
openSUSE-SU-2023:0005-1
Security update for python-Django
CVE-2022-28347
A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.
CVE-2022-28347
A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.
CVE-2022-28347
A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.
CVE-2022-28347
A SQL injection issue was discovered in QuerySet.explain() in Django 2 ...
CVE-2022-28346
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.
CVE-2022-28346
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.
CVE-2022-28346
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.
CVE-2022-28346
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13 ...
GHSA-w24h-v9qh-8gxj
SQL Injection in Django
BDU:2022-02670
Уязвимость реализации функции QuerySet.explain() программной платформы для веб-приложений Django, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
GHSA-2gwj-7jmv-h26r
SQL Injection in Django
BDU:2022-02671
Уязвимость реализации методов QuerySet.annotate(), aggregate() и extra() программной платформы для веб-приложений Django, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
SUSE-SU-2024:2817-1
Security update for python-Django
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20220516-04 Множественные уязвимости Django | больше 4 лет назад | ||
| ALT-PU-2022-1677 ALT-PU-2022-1677: package `python3-module-django` update to version 3.2.13-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-1670 ALT-PU-2022-1670: package `python3-module-django` update to version 3.2.13-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
 | openSUSE-SU-2023:0005-1 Security update for python-Django | почти 4 года назад | ||
 | CVE-2022-28347 A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-28347 A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name. | CVSS3: 9.4 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-28347 A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| CVE-2022-28347 A SQL injection issue was discovered in QuerySet.explain() in Django 2 ... | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| CVE-2022-28346 An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs. | CVSS3: 9.8 | 19% Средний | больше 4 лет назад |
| CVE-2022-28346 An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs. | CVSS3: 9.4 | 19% Средний | больше 4 лет назад |
| CVE-2022-28346 An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs. | CVSS3: 9.8 | 19% Средний | больше 4 лет назад |
| CVE-2022-28346 An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13 ... | CVSS3: 9.8 | 19% Средний | больше 4 лет назад |
| GHSA-w24h-v9qh-8gxj SQL Injection in Django | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | BDU:2022-02670 Уязвимость реализации функции QuerySet.explain() программной платформы для веб-приложений Django, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| GHSA-2gwj-7jmv-h26r SQL Injection in Django | CVSS3: 9.8 | 19% Средний | больше 4 лет назад |
| BDU:2022-02671 Уязвимость реализации методов QuerySet.annotate(), aggregate() и extra() программной платформы для веб-приложений Django, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 9.8 | 19% Средний | больше 4 лет назад |
| SUSE-SU-2024:2817-1 Security update for python-Django | больше 2 лет назад |
Уязвимостей на страницу