April 11, 2022
Django 3.2.13 fixes two security issues with severity "high" in 3.2.12 and a regression in 3.2.4.
QuerySet.annotate()
, aggregate()
, and extra()
¶QuerySet.annotate()
, aggregate()
, and
extra()
methods were subject to SQL injection in column
aliases, using a suitably crafted dictionary, with dictionary expansion, as the
**kwargs
passed to these methods.
QuerySet.explain(**options)
on PostgreSQL¶QuerySet.explain()
method was subject to SQL injection in option names,
using a suitably crafted dictionary, with dictionary expansion, as the
**options
argument.
5月 12, 2023