A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Apr 12, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 12, 2022 |
| Centos_linux | — | Upgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-runtimeUpgrade rubygem-clampUpgrade rubygem-highlineUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-unf_extUpgrade tfm-rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-localeUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-domain_nameUpgrade tfm-rubygem-mime-typesUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-highlineUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-powerbarUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-oauthUpgrade tfm-rubygem-http-cookieUpgrade rubygem-netrcUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-domain_nameUpgrade satellite-cloneUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-hashieUpgrade tfm-rubygem-oauthUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unicodeUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-maintainUpgrade rubygem-unfUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_katello | Jul 14, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade python-django | Nov 4, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade py37-django32Upgrade py38-django40Upgrade py37-django22Upgrade py310-django40Upgrade py38-django22Upgrade py310-django32Upgrade py38-django32Upgrade py310-django22Upgrade py39-django22Upgrade py39-django32Upgrade py39-django40 | Nov 4, 2022 | Apr 12, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-foreman_maintainUpgrade rubygem-unicodeUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unicodeUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade foreman-cliUpgrade rubygem-highlineUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-mime-types-dataUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-oauthUpgrade tfm-rubygem-jwtUpgrade satellite-cloneUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-powerbarUpgrade rubygem-apipie-bindingsUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-runtimeUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-domain_nameUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-fast_gettextUpgrade rubygem-loggingUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-highlineUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-http-cookieUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-netrcUpgrade tfm-rubygem-mime-typesUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-localeUpgrade tfm-rubygem-apipie-bindingsUpgrade satellite-maintainUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-domain_nameUpgrade satellite-cliUpgrade tfm-rubygem-localeUpgrade rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli | Jul 14, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Apr 12, 2022 |
| Ubuntu | — | Upgrade python3-django | Mar 22, 2023 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub