Vulnetix
Try Vulnetix Request Demo
CVE-2025-57833 PUBLISHED

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().

EPSS 0.02% · 4.9th percentile

Risk Scores

EPSS Score
0.02%
4.9th percentile

Affected Products

VendorProductVersions
Bitnamidjango5.2.0, 5.2.0, 4.2.0
Bitnamidjango5.1.0, 5.2.0, 4.2.0

Timeline

References

Open in Interactive Console →