A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Apr 12, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 12, 2022 |
| Centos_linux | — | Upgrade tfm-rubygem-hashieUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-runtimeUpgrade rubygem-loggingUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-clampUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-highlineUpgrade rubygem-unf_extUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cliUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-amazing_printUpgrade rubygem-powerbarUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-localeUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-domain_nameUpgrade rubygem-mime-typesUpgrade tfm-rubygem-unfUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-jwtUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-apipie-bindingsUpgrade rubygem-hashieUpgrade tfm-rubygem-oauthUpgrade satellite-maintainUpgrade satellite-cliUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-clampUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_templatesUpgrade foreman-cliUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-localeUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-domain_nameUpgrade satellite-cloneUpgrade tfm-rubygem-http-cookieUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-powerbarUpgrade rubygem-netrcUpgrade rubygem-oauthUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_ansible | Jul 14, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade python-django | Nov 4, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade py310-django22Upgrade py39-django22Upgrade py39-django32Upgrade py39-django40Upgrade py38-django32Upgrade py310-django32Upgrade py37-django32Upgrade py37-django22Upgrade py38-django40Upgrade py38-django22Upgrade py310-django40 | Nov 4, 2022 | Apr 12, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-little-pluggerUpgrade rubygem-domain_nameUpgrade rubygem-oauthUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-amazing_printUpgrade tfm-rubygem-clampUpgrade rubygem-powerbarUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hashieUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-jwtUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-unicodeUpgrade rubygem-highlineUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-mime-types-dataUpgrade satellite-cloneUpgrade rubygem-http-cookieUpgrade rubygem-foreman_maintainUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unfUpgrade tfm-rubygem-powerbarUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-runtimeUpgrade tfm-rubygem-netrcUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-highlineUpgrade rubygem-netrcUpgrade satellite-cliUpgrade rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-maintainUpgrade rubygem-localeUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-localeUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-multi_jsonUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_ext-debugsource | Jul 14, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Apr 12, 2022 |
| Ubuntu | — | Upgrade python3-django | Mar 22, 2023 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub