PT-2022-2356 · Django+5 · Django+5

Mariusz Felisiak

·

Published

2022-04-11

·

Updated

2026-01-03

·

CVE-2022-28347

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Django versions 2.2 through 2.2.27 Django versions 3.2 through 3.2.12 Django versions 4.0 through 4.0.3
Description A SQL injection issue was discovered in the QuerySet.explain() function. This occurs by passing a crafted dictionary as the **options argument, and placing the injection payload in an option name. The issue is related to the lack of protection of the SQL query structure, which may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations For Django versions 2.2 through 2.2.27, update to version 2.2.28 or later. For Django versions 3.2 through 3.2.12, update to version 3.2.13 or later. For Django versions 4.0 through 4.0.3, update to version 4.0.4 or later. As a temporary workaround, consider restricting the use of the QuerySet.explain() function until a patch is available. Avoid passing crafted dictionaries as the **options argument to minimize the risk of exploitation.

Fix

DoS

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2022-1670
ALT-PU-2022-1677
BDU:2022-02670
BIT-DJANGO-2022-28347
CVE-2022-28347
DSA-5254-1
GHSA-W24H-V9QH-8GXJ
MGASA-2022-0190
OESA-2022-1642
OPENSUSE-SU-2023:0005-1
OPENSUSE-SU-2024:12094-1
OPENSUSE-SU-2024:14208-1
OPENSUSE-SU-2025:14662-1
OPENSUSE-SU-2026:10005-1
PYSEC-2022-191
RHSA-2022:5498
RHSA-2022:5602
RHSA-2022:5702
RHSA-2022:5703
RLSA-2022:5498
USN-5373-1

Affected Products

Alt Linux
Django
Linuxmint
Red Os
Rocky Linux
Ubuntu