CNNVD-202512-215 Information
CNNVD ID
CNNVD-202512-215
Related CVE
- CNNVD Published: 2025-12-02
Description (Chinese)
Django是Django基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 Django 5.2.9之前版本、5.1.15之前版本和4.2.27之前版本存在安全漏洞，该漏洞源于FilteredRelation存在SQL注入，可能导致SQL注入攻击。
Description (English)
Django is an open-source Web application framework based on the Python language of the Django Foundation. The framework includes object-oriented maprs, view systems, templates, etc. There is a security loophole in the pre-Django 5.2.9, pre-5.1.15 and pre-4.2.27 versions, which stems from the presence of SQL injections in Filtered Relation, which could lead to an SQL injection attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Django
Published
2025-12-02
Last Modified
2026-02-24
References
https://docs.djangoproject.com/en/dev/releases/security/ https://groups.google.com/g/django-announce https://www.djangoproject.com/weblog/2025/dec/02/security-releases/ https://vigilance.fr/vulnerability/Django-SQL-injection-via-FilteredRelation-48942
Patch
https://www.djangoproject.com/download/
Share on: