FLAT-JSRHW – Vulnerability | Fluid Attacks Database

Database

Description

sql injection

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
pypi	django	>=0 <1.11.28 \|\| >=2.0 <2.2.10 \|\| >=3.0 <3.0.3	1.11.28, 2.2.10, 3.0.3
debian 14	python-django	>=0 <2:2.2.10-1	2:2.2.10-1
alpine v3.10	py-django	>=0 <1.11.28-r0	1.11.28-r0
alpine v3.8	py-django	>=0 <1.11.28-r0	1.11.28-r0
alpine v3.9	py-django	>=0 <1.11.28-r0	1.11.28-r0
alpine v3.11	py3-django	>=0 <1.11.28-r0	1.11.28-r0
alpine v3.12	py3-django	>=0 <1.11.28-r0	1.11.28-r0
debian 12	python-django	>=0 <2:2.2.10-1	2:2.2.10-1
debian 13	python-django	>=0 <2:2.2.10-1	2:2.2.10-1
debian 11	python-django	>=0 <2:2.2.10-1	2:2.2.10-1

1-10 of 11

10

Aliases

1. CVE-2020-74712. NVD-2020-74713. OSV-2020-74714. OSV-DEBIAN-2020-74715. OSV-ALPINE-2020-74716. GHSA-hmr4-m2h5-33qx7. GCVE-2020-74718. security.gentoo.org9. SECURITY-TRACKER-CVE-2020-747110. SECURITY-CVE-2020-7471

References

1. https://github.com/django/django/commit/001b0634cd309e372edb6d7d95d083d02b8e37bd2. https://github.com/django/django/commit/505826b469b16ab36693360da9e11fd13213421b3. https://github.com/django/django/commit/c67a368c16e4680b324b4f385398d638db4d81474. https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda9730561365. https://www.openwall.com/lists/oss-security/2020/02/03/16. https://www.djangoproject.com/weblog/2020/feb/03/security-releases7. https://www.debian.org/security/2020/dsa-46298. https://usn.ubuntu.com/4264-19. https://security.netapp.com/advisory/ntap-20200221-000610. https://seclists.org/bugtraq/2020/Feb/3011. https://lists.fedoraproject.org/archives/list/[email protected]/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ12. https://groups.google.com/forum/#!topic/django-announce/X45S86X5bZI13. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2020-35.yaml14. https://docs.djangoproject.com/en/3.0/releases/security15. http://www.openwall.com/lists/oss-security/2020/02/03/116. https://github.com/Saferman/CVE-2020-7471

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.