An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Apr 12, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 12, 2022 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-amazing_printUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-clampUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade foreman-cliUpgrade tfm-rubygem-unicodeUpgrade rubygem-domain_nameUpgrade rubygem-foreman_maintainUpgrade rubygem-unfUpgrade rubygem-oauthUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicodeUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-http-cookieUpgrade tfm-rubygem-rest-clientUpgrade satellite-cloneUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-amazing_printUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-jwtUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-http-cookieUpgrade tfm-runtimeUpgrade rubygem-rest-clientUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-multi_jsonUpgrade rubygem-localeUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-loggingUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade satellite-maintainUpgrade satellite-cliUpgrade tfm-rubygem-hammer_cli_foreman_azure_rm | Jul 14, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade python-django | Apr 18, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade py38-django32Upgrade py37-django22Upgrade py310-django22Upgrade py310-django32Upgrade py39-django32Upgrade py39-django22Upgrade py39-django40Upgrade py310-django40Upgrade py38-django40Upgrade py38-django22Upgrade py37-django32 | Nov 4, 2022 | Apr 12, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade tfm-rubygem-unfUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-unf_extUpgrade rubygem-http-cookieUpgrade rubygem-highlineUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-rest-clientUpgrade satellite-cloneUpgrade tfm-rubygem-fast_gettextUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-localeUpgrade rubygem-apipie-bindingsUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-unfUpgrade rubygem-amazing_printUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-mime-types-dataUpgrade rubygem-foreman_maintainUpgrade rubygem-clampUpgrade rubygem-hammer_cliUpgrade rubygem-jwtUpgrade tfm-rubygem-clampUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade satellite-maintainUpgrade tfm-rubygem-loggingUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debugsourceUpgrade rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-powerbarUpgrade rubygem-unicodeUpgrade satellite-cliUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-highlineUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-jwtUpgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-domain_nameUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-runtimeUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-unf_extUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-netrcUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_katello | Jul 14, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Apr 12, 2022 |
| Ubuntu | — | Upgrade python-django (Ubuntu Pro)Upgrade python3-djangoUpgrade python3-django (Ubuntu Pro)Upgrade python-django | Mar 22, 2023 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub