CVE-2022-34265

high-risk

Published 2022-07-04

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.

Do I need to act?

92.8% chance of exploitation in next 30 days

EPSS score — higher than 7% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Fix available

Upgrade to: 746e88cc634469112b823225c19d75c7362f8ecf, caad462feaa84ba78ed658a9595a4a4363dad2db

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (1)

Django

Affected Vendors

Djangoproject

References (14)

Patch https://docs.djangoproject.com/en/4.0/releases/security/

https://groups.google.com/forum/#%21forum/django-announce

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20220818-0006/

Third Party Advisory https://www.debian.org/security/2022/dsa-5254

Patch https://www.djangoproject.com/weblog/2022/jul/04/security-releases/

Patch https://docs.djangoproject.com/en/4.0/releases/security/

https://groups.google.com/forum/#%21forum/django-announce

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20220818-0006/

Third Party Advisory https://www.debian.org/security/2022/dsa-5254

Patch https://www.djangoproject.com/weblog/2022/jul/04/security-releases/

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 20/34 · Moderate

Exposure 5/34 · Minimal