CVE-2022-34265

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jul 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-342665.5The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a di CVE-2022-342679.8An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirem CVE-2022-342689.8An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command CVE-2022-342698.8An issue was discovered in RWS WorldServer before 11.7.3. An authenticated, remote attacker can perform a ws-legacy/load_dtd?system_id= blin CVE-2022-34276.5The Corner Ad plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.56. This is due to miss CVE-2022-342709.8An issue was discovered in RWS WorldServer before 11.7.3. Regular users can create users with the Administrator role via UserWSUserManager.CVE-2022-342718.8A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache CVE-2022-342727.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds CVE-2022-342737.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write pa CVE-2022-342747.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write pa CVE-2022-342757.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write pa CVE-2022-342767.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write pa