An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Apr 12, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 12, 2022 |
| Centos_linux | — | Upgrade tfm-rubygem-jwtUpgrade rubygem-amazing_printUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-little-pluggerUpgrade rubygem-domain_nameUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-amazing_printUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-http-cookieUpgrade rubygem-unicodeUpgrade tfm-rubygem-unfUpgrade rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-rest-clientUpgrade satellite-cloneUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-runtimeUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicode-debuginfoUpgrade rubygem-http-cookieUpgrade rubygem-apipie-bindingsUpgrade rubygem-jwtUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-powerbarUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-netrcUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-multi_jsonUpgrade rubygem-localeUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-loggingUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-loggingUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unf_extUpgrade tfm-rubygem-hashieUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foremanUpgrade satellite-cliUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-clampUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-locale | Jul 14, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade python-django | Apr 18, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade py38-django22Upgrade py37-django32Upgrade py39-django40Upgrade py38-django40Upgrade py310-django40Upgrade py39-django32Upgrade py39-django22Upgrade py310-django32Upgrade py38-django32Upgrade py310-django22Upgrade py37-django22 | Nov 4, 2022 | Apr 12, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foremanUpgrade rubygem-loggingUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-netrcUpgrade rubygem-unicode-debuginfoUpgrade tfm-runtimeUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade satellite-maintainUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-unicodeUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-localeUpgrade satellite-cliUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-jwtUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade rubygem-unicode-display_widthUpgrade rubygem-foreman_maintainUpgrade rubygem-http-cookieUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-highlineUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-apipie-bindingsUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-unicodeUpgrade rubygem-unf_extUpgrade rubygem-unfUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-unfUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-fast_gettextUpgrade rubygem-oauthUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-clampUpgrade rubygem-jwtUpgrade satellite-cloneUpgrade rubygem-amazing_printUpgrade tfm-rubygem-netrcUpgrade rubygem-domain_nameUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hashie | Jul 14, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debugsource | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Apr 12, 2022 |
| Ubuntu | — | Upgrade python-django (Ubuntu Pro)Upgrade python-djangoUpgrade python3-django (Ubuntu Pro)Upgrade python3-django | Mar 22, 2023 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub