An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Apr 12, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 12, 2022 |
| Centos_linux | — | Upgrade rubygem-localeUpgrade rubygem-multi_jsonUpgrade rubygem-unicode-display_widthUpgrade rubygem-loggingUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-cliUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-highlineUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-netrcUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-typesUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-oauthUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-unicodeUpgrade rubygem-domain_nameUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-unfUpgrade rubygem-powerbarUpgrade rubygem-hammer_cliUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-rest-clientUpgrade tfm-runtimeUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-powerbarUpgrade foreman-cliUpgrade tfm-rubygem-http-cookieUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-fast_gettextUpgrade satellite-cloneUpgrade rubygem-unfUpgrade rubygem-mime-types-dataUpgrade rubygem-little-pluggerUpgrade rubygem-amazing_print | Jul 14, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade python-django | Apr 18, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade py39-django40Upgrade py37-django32Upgrade py310-django40Upgrade py38-django22Upgrade py38-django40Upgrade py310-django32Upgrade py37-django22Upgrade py38-django32Upgrade py39-django22Upgrade py310-django22Upgrade py39-django32 | Nov 4, 2022 | Apr 12, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-clampUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_extUpgrade rubygem-jwtUpgrade rubygem-amazing_printUpgrade tfm-rubygem-amazing_printUpgrade rubygem-localeUpgrade rubygem-little-pluggerUpgrade foreman-cliUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-rest-clientUpgrade rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hashieUpgrade rubygem-domain_nameUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-apipie-bindingsUpgrade rubygem-fast_gettextUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-unicodeUpgrade rubygem-hammer_cliUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade rubygem-unfUpgrade tfm-rubygem-netrcUpgrade satellite-cloneUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-oauthUpgrade rubygem-unicode-display_widthUpgrade satellite-cliUpgrade tfm-runtimeUpgrade rubygem-hammer_cli_katelloUpgrade satellite-maintainUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unicodeUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-loggingUpgrade rubygem-netrcUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-loggingUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-powerbarUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-powerbar | Jul 14, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade libdb-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Apr 12, 2022 |
| Ubuntu | — | Upgrade python3-django (Ubuntu Pro)Upgrade python-djangoUpgrade python3-djangoUpgrade python-django (Ubuntu Pro) | Mar 22, 2023 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub