Main Vulnerability Database Vulnerabilities #VU64905

SQL injection in Django - CVE-2022-34265

Published: July 4, 2022 / Updated: September 8, 2022

Vulnerability identifier: #VU64905

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-34265

CWE-ID: CWE-89

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data within Trunc(kind) and Extract(lookup_name) arguments. A remote attacker can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.

Affected software

Django
Debian Linux
Gentoo Linux
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Fedora
Ubuntu
python-django (Red Hat package)
openstack-heat-templates
python3-django (Ubuntu package)
python-django (Ubuntu package)
python-Django1
python-Django
python-django (Debian package)
ruby2.1-rubygem-puma
ruby2.1-rubygem-puma-debuginfo
rubygem-puma-debugsource
python-django3
rabbitmq-server-plugins
rabbitmq-server
python-murano
openstack-murano-engine
openstack-murano-doc
openstack-murano-api
openstack-murano
venv-openstack-murano-x86_64
python-django
dev-python/django
grafana-debuginfo
grafana
ardana-cobbler
ardana-ansible
ardana-tempest
venv-openstack-heat-x86_64
venv-openstack-horizon-x86_64
venv-openstack-horizon-hpe-x86_64
venv-openstack-neutron-x86_64
python-horizon-plugin-gbp-ui
openstack-horizon-plugin-gbp-ui
openstack-neutron-gbp
python-neutron-gbp
venv-openstack-nova-x86_64
openstack-nova-cells
openstack-nova
python-nova
openstack-nova-api
openstack-nova-vncproxy
openstack-nova-serialproxy
openstack-nova-scheduler
openstack-nova-placement-api
openstack-nova-novncproxy
openstack-nova-console
openstack-nova-conductor
openstack-nova-compute
Red Hat Satellite

How to mitigate CVE-2022-34265

Install updates from vendor's website.

Django - addressed in versions 3.2.14, 4.0.6
python-django (Red Hat package) - update to 3.2.14-3.el8ui
openstack-heat-templates - addressed in versions 0.0.0+git.1654529662.75fa04a-3.27.1, 0.0.0+git.1654529662.75fa04a7-3.15.1
python3-django (Ubuntu package) - addressed in versions 1:1.11.11-1ubuntu1.18, 2:2.2.12-1ubuntu0.12, 2:2.2.24-1ubuntu1.5, 2:3.2.12-2ubuntu1.1
python-django (Ubuntu package) - update to 1:1.11.11-1ubuntu1.18
python-Django1 - update to 1.11.29-3.40.1
python-Django - update to 1.11.29-3.42.1
python-django (Debian package) - update to 2:2.2.28-1~deb11u1
ruby2.1-rubygem-puma - addressed in versions 2.16.0-3.18.1, 2.16.0-4.18.1
ruby2.1-rubygem-puma-debuginfo - addressed in versions 2.16.0-3.18.1, 2.16.0-4.18.1
rubygem-puma-debugsource - addressed in versions 2.16.0-3.18.1, 2.16.0-4.18.1
python-django3 - update to 3.2.15-2.el8
rabbitmq-server-plugins - addressed in versions 3.6.16-3.13.1, 3.6.16-4.3.1
rabbitmq-server - addressed in versions 3.6.16-3.13.1, 3.6.16-4.3.1
python-murano - update to 4.0.2~dev3-3.12.1
openstack-murano-engine - update to 4.0.2~dev3-3.12.1
openstack-murano-doc - update to 4.0.2~dev3-3.12.1
openstack-murano-api - update to 4.0.2~dev3-3.12.1
openstack-murano - update to 4.0.2~dev3-3.12.1
venv-openstack-murano-x86_64 - update to 4.0.2~dev3-12.38.1
python-django - addressed in versions 4.0.10-1.fc37, 4.0.10-1.fc38
dev-python/django - update to 5.2.1
grafana-debuginfo - addressed in versions 6.7.4-3.29.1, 6.7.4-4.23.1
grafana - addressed in versions 6.7.4-3.29.1, 6.7.4-4.23.1
ardana-cobbler - addressed in versions 8.0+git.1660773402.d845a45-3.47.1, 9.0+git.1660747489.119efcd-3.19.1
ardana-ansible - addressed in versions 8.0+git.1660773729.3789a6d-3.85.1, 9.0+git.1660748476.c118d23-3.32.1
ardana-tempest - update to 9.0+git.1651855288.a2341ad-3.22.1
venv-openstack-heat-x86_64 - addressed in versions 9.0.8~dev22-12.45.1, 11.0.4~dev4-3.37.1
venv-openstack-horizon-x86_64 - addressed in versions 12.0.5~dev6-14.48.1, 14.1.1~dev11-4.41.1
venv-openstack-horizon-hpe-x86_64 - update to 12.0.5~dev6-14.48.1
venv-openstack-neutron-x86_64 - update to 13.0.8~dev206-6.41.1
python-horizon-plugin-gbp-ui - update to 14.0.1~dev4-3.12.1
openstack-horizon-plugin-gbp-ui - update to 14.0.1~dev4-3.12.1
openstack-neutron-gbp - update to 14.0.1~dev46-3.34.1
python-neutron-gbp - update to 14.0.1~dev46-3.34.1
venv-openstack-nova-x86_64 - update to 18.3.1~dev92-3.41.1
openstack-nova-cells - update to 18.3.1~dev92-3.43.1
openstack-nova - update to 18.3.1~dev92-3.43.1
python-nova - update to 18.3.1~dev92-3.43.1
openstack-nova-api - update to 18.3.1~dev92-3.43.1
openstack-nova-vncproxy - update to 18.3.1~dev92-3.43.1
openstack-nova-serialproxy - update to 18.3.1~dev92-3.43.1
openstack-nova-scheduler - update to 18.3.1~dev92-3.43.1
openstack-nova-placement-api - update to 18.3.1~dev92-3.43.1
openstack-nova-novncproxy - update to 18.3.1~dev92-3.43.1
openstack-nova-console - update to 18.3.1~dev92-3.43.1
openstack-nova-conductor - update to 18.3.1~dev92-3.43.1
openstack-nova-compute - update to 18.3.1~dev92-3.43.1

Links to Public Exploits and PoC-codes

External References

https://www.djangoproject.com/weblog/2022/jul/04/security-releases/