Description

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.

Remediation

References

CVE-2022-28346

Related Vulnerabilities

WordPress Plugin Disable Comments Cross-Site Request Forgery (1.0.3)

WordPress Plugin Mail logging-WP Mail Catcher Cross-Site Scripting (2.1.2)

Oracle JRE CVE-2018-2663 Vulnerability (CVE-2018-2663)

WordPress Plugin FV Flowplayer Video Player SQL Injection (7.5.15.727)

Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0526)

Severity

Critical

Classification

CVE-2022-28346 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities