mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-11-07 07:15:35 +00:00
Code Issues 32 Releases Wiki Activity

Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL injection in column aliases.

Browse Source 
Thanks Eyal Gabay (EyalSec) for the report.
This commit is contained in:
Jake Howard
2025-08-13 13:13:42 +01:00
committed by Sarah Boyce
parent d044e25dc2
commit 5171171709
5 changed files with 56 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
docs/releases/4.2.24.txt
View File

@@ -5,3 +5,10 @@ Django 4.2.24 release notes
*September 3, 2025*
Django 4.2.24 fixes a security issue with severity "high" in 4.2.23.
CVE-2025-57833: Potential SQL injection in ``FilteredRelation`` column aliases
==============================================================================
:class:`.FilteredRelation` was subject to SQL injection in column aliases,
using a suitably crafted dictionary, with dictionary expansion, as the
``**kwargs`` passed to :meth:`.QuerySet.annotate` or :meth:`.QuerySet.alias`.

7
docs/releases/5.1.12.txt
View File

@@ -5,3 +5,10 @@ Django 5.1.12 release notes
*September 3, 2025*
Django 5.1.12 fixes a security issue with severity "high" in 5.1.11.
CVE-2025-57833: Potential SQL injection in ``FilteredRelation`` column aliases
==============================================================================
:class:`.FilteredRelation` was subject to SQL injection in column aliases,
using a suitably crafted dictionary, with dictionary expansion, as the
``**kwargs`` passed to :meth:`.QuerySet.annotate` or :meth:`.QuerySet.alias`.

7
docs/releases/5.2.6.txt
View File

@@ -6,6 +6,13 @@ Django 5.2.6 release notes
Django 5.2.6 fixes a security issue with severity "high" and one bug in 5.2.5.
CVE-2025-57833: Potential SQL injection in ``FilteredRelation`` column aliases
==============================================================================
:class:`.FilteredRelation` was subject to SQL injection in column aliases,
using a suitably crafted dictionary, with dictionary expansion, as the
``**kwargs`` passed to :meth:`.QuerySet.annotate` or :meth:`.QuerySet.alias`.
Bugfixes
========