REDHAT-BUG-2392990: SQL Injection
An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate() or QuerySet.alias().
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2392990?
REDHAT-BUG-2392990 is classified as a medium severity SQL injection vulnerability affecting specific versions of Django.
How do I fix REDHAT-BUG-2392990?
To fix REDHAT-BUG-2392990, upgrade Django to version 4.2.24, 5.1.12, or 5.2.6 or later.
Which versions of Django are affected by REDHAT-BUG-2392990?
Django versions before 4.2.24, 5.1.12, and 5.2.6 are affected by REDHAT-BUG-2392990.
What is the nature of the vulnerability in REDHAT-BUG-2392990?
The vulnerability in REDHAT-BUG-2392990 is an SQL injection issue related to FilteredRelation and improper handling of column aliases.
How can REDHAT-BUG-2392990 potentially affect my application?
If exploited, REDHAT-BUG-2392990 could allow an attacker to execute arbitrary SQL code against the database, compromising data integrity and security.