critical9.8
CVE-2021-30459
A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL s…
Impact
A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input field of the SQL explain, analyze, or select form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jazzband | Django Debug Toolbar | from 0.10.0 before 1.11.1 from 2.0.0 before 2.2.1 from 3.0.0 before 3.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/jazzband/django-debug-toolbar/releases
- https://github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gj
- https://www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases/
- https://github.com/jazzband/django-debug-toolbar/releases
- https://github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gj
- https://www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases/