{"id":"CVE-2021-35042","published":"2021-07-02T09:54:11Z","modified":"2024-08-04T00:33:49Z","title":"Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted…","vendor":null,"product":null,"tier":"tail","description":{"text":"Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.44369,"percentile":0.98761,"provenance":"source"},"cwes":[],"references":[{"url":"https://groups.google.com/forum/#%21forum/django-announce","tags":["x_refsource_MISC"]},{"url":"https://docs.djangoproject.com/en/3.2/releases/security/","tags":["x_refsource_MISC"]},{"url":"https://www.openwall.com/lists/oss-security/2021/07/02/2","tags":["x_refsource_CONFIRM"]},{"url":"https://www.djangoproject.com/weblog/2021/jul/01/security-releases/","tags":["x_refsource_CONFIRM"]},{"url":"https://security.netapp.com/advisory/ntap-20210805-0008/","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SS6NJTBYWOX6J7G4U3LUOILARJKWPQ5Y/","tags":["vendor-advisory","x_refsource_FEDORA"]}],"priority":{"score":24.8,"factors":[{"name":"EPSS percentile","points":19.75},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"pocGithub":{"count":5,"skipped":1,"earliest":"2021-07-10","earliestUrl":"https://github.com/YouGina/CVE-2021-35042","repos":[{"name":"YouGina/CVE-2021-35042","url":"https://github.com/YouGina/CVE-2021-35042","stars":13,"created":"2021-07-10"},{"name":"r4vi/CVE-2021-35042","url":"https://github.com/r4vi/CVE-2021-35042","stars":5,"created":"2021-09-24"},{"name":"zer0qs/CVE-2021-35042","url":"https://github.com/zer0qs/CVE-2021-35042","stars":2,"created":"2022-04-25"},{"name":"mrlihd/CVE-2021-35042","url":"https://github.com/mrlihd/CVE-2021-35042","stars":0,"created":"2021-09-01"},{"name":"LUUANHDUC/CVE-2021-35042","url":"https://github.com/LUUANHDUC/CVE-2021-35042","stars":0,"created":"2023-05-18"}]},"first":{"date":"2021-07-10","source":"PoC-in-GitHub","url":"https://github.com/YouGina/CVE-2021-35042"},"provenance":"source"},"affected":[{"ecosystem":"PyPI","package":"Django","vulnerableRanges":[">=3.2a1, <3.2.5",">=3.0a1, <3.1.13",">=3.1, <3.1.13",">=3.2, <3.2.5"],"patched":["3.2.5","3.1.13"],"from":["GHSA-xpfp-f569-q3p2","PYSEC-2021-109"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-0061","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2021-32052","published":"2021-05-06","fixed":"3.2.2","kev":false},{"cve":"CVE-2021-33203","published":"2021-06-08","fixed":"3.2.4","kev":false,"link":{"from":"CVE-2021-33203","to":"CVE-2021-35042","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:Django","fromFixed":"3.2.4","toFixed":"3.2.5","daysApart":24}]}},{"cve":"CVE-2021-33571","published":"2021-06-08","fixed":"3.2.4","kev":false},{"cve":"CVE-2021-35042","published":"2021-07-02","fixed":"3.2.5","kev":false},{"cve":"CVE-2021-44420","published":"2021-12-07","fixed":"3.2.10","kev":false,"link":{"from":"CVE-2021-35042","to":"CVE-2021-44420","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:Django","fromFixed":"3.1.13","toFixed":"3.1.14","daysApart":158}]}},{"cve":"CVE-2021-45115","published":"2022-01-04","fixed":"4.0.1","kev":false},{"cve":"CVE-2021-45116","published":"2022-01-04","fixed":"4.0.1","kev":false}],"package":"PyPI:Django"}}