Skip to content
OpenAdvisories
Critical RHSA-2022:5115 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update

Published Sep 18, 2024 · Updated Feb 18, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.2::el8 python-django20 0:2.0.13-17.el8ost

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-28346 Public exploit EPSS 19%

    SQL Injection in Django

    An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the pass…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2072447
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5115.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-28346
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-28346
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-28346
  • article
    https://www.djangoproject.com/weblog/2022/apr/11/security-releases/