KDE Django up to 3.2.13/4.0.5 Trunc/Extract kind/lookup_name sql injection

Summaryinfo

A vulnerability was found in KDE Django up to 3.2.13/4.0.5. It has been rated as critical. This vulnerability affects the function Trunc/Extract. Performing a manipulation of the argument kind/lookup_name results in sql injection. This vulnerability is reported as CVE-2022-34265. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in KDE Django up to 3.2.13/4.0.5 (Content Management System). It has been classified as critical. This affects the function Trunc/Extract. The manipulation of the argument kind/lookup_name with an unknown input leads to a sql injection vulnerability. CWE is classifying the issue as CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.

The weakness was disclosed 07/05/2022. The advisory is shared at docs.djangoproject.com. This vulnerability is uniquely identified as CVE-2022-34265 since 06/21/2022. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1505 for this issue.

Upgrading to version 3.2.14 or 4.0.6 eliminates this vulnerability. The upgrade is hosted for download at djangoproject.com.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Content Management System

Vendor

• KDE

Name

• Django

Version

• 3.2.0
• 3.2.1
• 3.2.2
• 3.2.3
• 3.2.4
• 3.2.5
• 3.2.6
• 3.2.7
• 3.2.8
• 3.2.9
• 3.2.10
• 3.2.11
• 3.2.12
• 3.2.13
• 4.0.0
• 4.0.1
• 4.0.2
• 4.0.3
• 4.0.4
• 4.0.5

License

• open-source

Website

• Vendor: https://kde.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion