CVE-2022-34265-master.zip

Vulnerability Summary This vulnerability is due to improper string processing when executing SQL for the arguments of the functions Trunc and Extract used for date data in Django. By specifying the request parameters as is in the kind argument of Trunc or the lookup_name argument of Extract, there is a risk that arbitrary SQL minutes can be executed. By exploiting this vulnerability, a third part

Category

Other

File type

ZIP · 5.93 KB

Added

9/15/2026, 2:32:37 AM