VDB
BDU%3A2021-03557
BDU%3A2021-03557
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции QuerySet.order_by() программной платформы для веб-приложений Django, позволяющая нарушителю выполнить произвольные команды
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Django Software Foundation | Debian GNU/Linux, Django |
Timeline
- Jul 13, 2021 CVE Published
- Apr 15, 2022 CVE Updated
References
- https://docs.djangoproject.com/en/3.2/releases/security/ url
- https://groups.google.com/forum/#!forum/django-announce url
- https://www.djangoproject.com/weblog/2021/jul/01/security-releases/ url
- https://www.openwall.com/lists/oss-security/2021/07/02/2 url
- https://access.redhat.com/security/cve/cve-2021-35042 url
- https://docs.djangoproject.com/en/3.1/releases/3.1.13/ url
- https://nvd.nist.gov/vuln/detail/CVE-2021-35042 url
- https://security-tracker.debian.org/tracker/CVE-2021-35042 url
- https://docs.djangoproject.com/en/3.2/releases/3.2.5/ advisory