logo

Database

SQL injection In python-django

Description

insufficient validation

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2021-350422. NVD-2021-350423. OSV-2021-350424. GHSA-xpfp-f569-q3p25. GCVE-2021-35042

References

1. https://github.com/django/django/commit/0bd57a879a0d54920bb9038a732645fb917040e92. https://github.com/django/django/commit/a34a5f724c5d5adb2109374ba3989ebb7b11f81f3. https://github.com/django/django/commit/dae83a24519d6f284c74414e0b81d64d9b5a0db44. https://docs.djangoproject.com/en/3.2/releases/security5. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-109.yaml6. https://groups.google.com/forum/#!forum/django-announce7. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SS6NJTBYWOX6J7G4U3LUOILARJKWPQ5Y8. https://security.netapp.com/advisory/ntap-20210805-00089. https://www.djangoproject.com/weblog/2021/jul/01/security-releases10. https://www.openwall.com/lists/oss-security/2021/07/02/211. https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2021/CVE-2021-35042.yaml12. https://github.com/YouGina/CVE-2021-35042

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-ESKOM – Vulnerability | Fluid Attacks Database