Võrgu raamistikus Django esinev haavatavus, mis võib viia SQL-i koodi sisestamiseni
On the release of corrective updates for the web framework Django 4.0.6 and 3.2.14, which fix a vulnerability (CVE-2022-34265) that potentially allows the execution of custom SQL code. The issue affects applications that use unverified external data in the parameters kind and lookup_name, passed to the functions Trunc(kind) and Extract(lookup_name). Programs that allow only verified data in the values of lookup_name and kind are not affected by this vulnerability. The issue has been blocked through a ban […]
