CVE-2021-30459
2 advisories.
PyPI/django-debug-toolbar CVE-2021-30459: critical 9.8, EPSS 1.94%
SQL Injection via in django-debug-toolbar
Action: Upgrade django-debug-toolbar to 1.11.1 or later.
pip install django-debug-toolbar==1.11.1pip install django-debug-toolbar==2.2.1pip install django-debug-toolbar==3.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.0 | 1.11.1 | - |
| 2.0a1 | 2.2.1 | - |
| 3.0a1 | 3.2.1 | - |
Fixed versions
| 1.11.1 | 2.2.1 | 3.2.1 |
Sources
- osv: GHSA-pghf-347x-c2gj
- https://github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gj
- https://nvd.nist.gov/vuln/detail/CVE-2021-30459
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30459
- https://github.com/jazzband/django-debug-toolbar
- https://github.com/jazzband/django-debug-toolbar/releases
- https://github.com/pypa/advisory-database/tree/main/vulns/django-debug-toolbar/PYSEC-2021-10.yaml
- https://www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases
CVE-2021-30459 · published · modified · JSON
PyPI/django-debug-toolbar CVE-2021-30459: unknown, EPSS 1.94%
A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input f
Action: Upgrade django-debug-toolbar to 1.11.1 or later.
pip install django-debug-toolbar==1.11.1pip install django-debug-toolbar==2.2.1pip install django-debug-toolbar==3.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.0 | 1.11.1 | - |
| 2.0 | 2.2.1 | - |
| 3.0 | 3.2.1 | - |
Fixed versions
| 1.11.1 | 2.2.1 | 3.2.1 |
Sources
- osv: PYSEC-2021-10
- https://github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gj
- https://www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases/
- https://github.com/jazzband/django-debug-toolbar/releases
CVE-2021-30459 · published · modified · JSON