← voltar
CVE-2021-30459

CVE-2021-30459

EPSS 1.9%
A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input field of the SQL explain, analyze, or select form.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/jazzband/django-debug-toolbar/releaseshttps://github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gjhttps://www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases/