CVE-2022-28346

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-28346
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-28346.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-28346
Aliases
Downstream
Related
Published
2022-04-12T05:15:06.927Z
Modified
2026-04-11T12:42:53.033277Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "11.0"
                }
            ],
            "cpe": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "9.0"
                }
            ],
            "cpe": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
        }
    ]
}
References

Affected packages

Git / github.com/django/django

Affected ranges

Type
GIT
Repo
https://github.com/django/django
Events
Introduced
2a62cdcfec85938f40abb2e9e6a9ff497e02afe8
Fixed
5c3300027b30c1b498d99010f7d618316f685045
Introduced
3591e1c1acbd7c13174275367c3fdf012cb0413b
Fixed
08e6073f878264a0c091da0d3db456820252ef6c
Introduced
ef62a3a68c9d558486145a42c0d71ea9a76add9e
Fixed
89807fbde8b7b17d00434bc4695535855e96fe77
Database specific 
{
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "2.2"
        },
        {
            "fixed": "2.2.28"
        },
        {
            "introduced": "3.2"
        },
        {
            "fixed": "3.2.13"
        },
        {
            "introduced": "4.0"
        },
        {
            "fixed": "4.0.4"
        }
    ],
    "cpe": "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*"
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-28346.json"