Red Hat Security AdvisoryRHSA-2022:5703
Red Hat Ansible Automation Platform 1.2 security update
Released 2022-07-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Automation Hub 4.2 for RHEL 7 python3-django-2.2.28-1.el7pc
- Red Hat Automation Hub 4.2 for RHEL 8 python3-django-2.2.28-1.el8pc
Fixes 2 records
Priority MEDIUM 60
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.18661 · Published 2022-04-12 · Partial fix · 2.2.28, 3.2.13 +1 CWE-89
Priority MEDIUM 47
A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02943 · Published 2022-04-12 · Partial fix · 2.2.28, 3.2.13 +1 CWE-89