An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Apr 12, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 12, 2022 |
| Centos_linux | — | Upgrade rubygem-amazing_printUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-unfUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cliUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-runtimeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-rest-clientUpgrade satellite-cloneUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-apipie-bindingsUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicodeUpgrade tfm-rubygem-jwtUpgrade rubygem-oauthUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-unicodeUpgrade foreman-cliUpgrade rubygem-powerbarUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-http-cookieUpgrade tfm-rubygem-loggingUpgrade rubygem-mime-typesUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foremanUpgrade satellite-cliUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-unf_extUpgrade rubygem-loggingUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-localeUpgrade rubygem-highlineUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-multi_jsonUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-clampUpgrade rubygem-netrcUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-little-plugger | Jul 14, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade python-django | Apr 18, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade py39-django22Upgrade py37-django22Upgrade py310-django22Upgrade py310-django32Upgrade py39-django32Upgrade py38-django32Upgrade py38-django40Upgrade py37-django32Upgrade py39-django40Upgrade py38-django22Upgrade py310-django40 | Nov 4, 2022 | Apr 12, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-clampUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-netrcUpgrade rubygem-foreman_maintainUpgrade rubygem-jwtUpgrade rubygem-hammer_cliUpgrade satellite-cloneUpgrade tfm-rubygem-unfUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unfUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-clampUpgrade rubygem-localeUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-fast_gettextUpgrade rubygem-rest-clientUpgrade rubygem-highlineUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade foreman-cliUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-amazing_printUpgrade rubygem-unicodeUpgrade tfm-runtimeUpgrade rubygem-powerbarUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-loggingUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade satellite-maintainUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-netrcUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-cliUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-mime-typesUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-powerbar | Jul 14, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Apr 12, 2022 |
| Ubuntu | — | Upgrade python-djangoUpgrade python3-djangoUpgrade python3-django (Ubuntu Pro)Upgrade python-django (Ubuntu Pro) | Mar 22, 2023 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub