SQL injection in Django
High severity
GitHub Reviewed
Published
Jun 5, 2020
to the GitHub Advisory Database
•
Updated Apr 1, 2024
Package
Affected versions
>= 3.0.0, < 3.0.4
>= 1.11.0, < 1.11.29
>= 2.2.0, < 2.2.11
Patched versions
3.0.4
1.11.29
2.2.11
Description
Published by the National Vulnerability Database
Mar 5, 2020
Reviewed
Jun 4, 2020
Published to the GitHub Advisory Database
Jun 5, 2020
Last updated
Apr 1, 2024
Credits
-
sunSUNQ Analyst
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possible to break escaping and inject malicious SQL.
References