Description

Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.

Remediation

References

CVE-2021-35042

Related Vulnerabilities

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-5322)

WordPress Plugin Connections Business Directory Unspecified Vulnerability (10.4.7)

WordPress Plugin Monetize Multiple Vulnerabilities (1.03)

Ruby Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-16254)

WordPress Plugin Donation Block For PayPal Cross-Site Scripting (2.0.0)

Severity

Critical

Classification

CVE-2021-35042 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities