CVE-2025-57833
Fixed in a distro release EPSS 26%CVSS 7.1
An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().
Products: djangoproject django
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | django | 4.2.24 |
| PyPI | django | 5.1.12 |
| PyPI | django | 5.2.6 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | awx | 24.6.1-r14 |
| Debian 11 | python-django | 2:2.2.28-1~deb11u8 |
| Debian 12 | python-django | 3:3.2.25-0+deb12u1 |
| Debian 13 | python-django | 3:4.2.27-0+deb13u1 |
| Debian 14 | python-django | 3:4.2.24-1 |
| Red Hat ansible automation platform 2.4 | python-django | 0:4.2.24-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-django | 0:4.2.24-1.el9ap |
| Red Hat ansible automation platform 2.4 | python39-django | 0:4.2.24-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-django | 0:4.2.24-1.el8ap |
| Red Hat ansible automation platform 2.5 | automation-controller-venv-tower | 0:4.6.20-1.el8ap |
| Red Hat ansible automation platform 2.5 | automation-controller-venv-tower | 0:4.6.20-1.el9ap |
| Red Hat ansible automation platform 2.5 | python3.11-django | 0:4.2.24-1.el9ap |
| Red Hat ansible automation platform 2.5 | python3.11-django | 0:4.2.24-1.el8ap |
| Red Hat ansible automation platform developer 2.5 | python3.11-django | 0:4.2.24-1.el9ap |
| Red Hat ansible automation platform developer 2.5 | python3.11-django | 0:4.2.24-1.el8ap |
| Red Hat openstack 16.2 | python-django20 | 0:2.0.13-20.el8ost |
| Red Hat openstack 16.2 | python3-django20 | 0:2.0.13-20.el8ost |
| Red Hat openstack 17.1 | python-django | 0:2.2.24-12.el9ost |
| Red Hat openstack 17.1 | python3-django | 0:2.2.24-12.el9ost |
| Red Hat openstack 18.0 | python-django | 0:3.2.12-9.el9ost |
| Red Hat openstack 18.0 | python3-django | 0:3.2.12-9.el9ost |
| Red Hat satellite 6.15 | cjson | 0:1.7.18-2.el8sat |
| Red Hat satellite 6.15 | cjson-debuginfo | 0:1.7.18-2.el8sat |
| Red Hat satellite 6.15 | cjson-debugsource | 0:1.7.18-2.el8sat |
| Red Hat satellite 6.15 | puppet-agent | 0:7.34.0-4.el8sat |
| Red Hat satellite 6.15 | python-django | 0:4.2.24-0.1.el8pc |
| Red Hat satellite 6.15 | python3.11-django | 0:4.2.24-0.1.el8pc |
| Red Hat satellite 6.16 | cjson | 0:1.7.18-2.el9sat |
| Red Hat satellite 6.16 | cjson | 0:1.7.18-2.el8sat |
| Red Hat satellite 6.16 | cjson-debuginfo | 0:1.7.18-2.el9sat |
| Red Hat satellite 6.16 | cjson-debuginfo | 0:1.7.18-2.el8sat |
| Red Hat satellite 6.16 | cjson-debugsource | 0:1.7.18-2.el8sat |
| Red Hat satellite 6.16 | cjson-debugsource | 0:1.7.18-2.el9sat |
| Red Hat satellite 6.16 | puppet-agent | 0:8.8.1-3.el9sat |
| Red Hat satellite 6.16 | puppet-agent | 0:8.8.1-3.el8sat |
| Red Hat satellite 6.16 | python-django | 0:4.2.24-0.1.el8pc |
| Red Hat satellite 6.16 | python-django | 0:4.2.24-0.1.el9pc |
| Red Hat satellite 6.16 | python3.11-django | 0:4.2.24-0.1.el9pc |
| Red Hat satellite 6.16 | python3.11-django | 0:4.2.24-0.1.el8pc |
| Red Hat satellite 6.17 | cjson | 0:1.7.18-2.el9sat |
| Red Hat satellite 6.17 | cjson-debuginfo | 0:1.7.18-2.el9sat |
| Red Hat satellite 6.17 | cjson-debugsource | 0:1.7.18-2.el9sat |
| Red Hat satellite 6.17 | puppet-agent | 0:8.8.1-3.el9sat |
| Red Hat satellite 6.17 | python-django | 0:4.2.24-0.1.el9pc |
| Red Hat satellite 6.17 | python3.11-django | 0:4.2.24-0.1.el9pc |
| Red Hat satellite capsule 6.15 | cjson | 0:1.7.18-2.el8sat |
| Red Hat satellite capsule 6.15 | cjson-debuginfo | 0:1.7.18-2.el8sat |
| Red Hat satellite capsule 6.15 | cjson-debugsource | 0:1.7.18-2.el8sat |
| Red Hat satellite capsule 6.15 | puppet-agent | 0:7.34.0-4.el8sat |
| Red Hat satellite capsule 6.15 | python-django | 0:4.2.24-0.1.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-django | 0:4.2.24-0.1.el8pc |
| Red Hat satellite capsule 6.16 | cjson | 0:1.7.18-2.el8sat |
| Red Hat satellite capsule 6.16 | cjson | 0:1.7.18-2.el9sat |
| Red Hat satellite capsule 6.16 | cjson-debuginfo | 0:1.7.18-2.el9sat |
| Red Hat satellite capsule 6.16 | cjson-debuginfo | 0:1.7.18-2.el8sat |
| Red Hat satellite capsule 6.16 | cjson-debugsource | 0:1.7.18-2.el9sat |
| Red Hat satellite capsule 6.16 | cjson-debugsource | 0:1.7.18-2.el8sat |
| Red Hat satellite capsule 6.16 | puppet-agent | 0:8.8.1-3.el8sat |
| Red Hat satellite capsule 6.16 | puppet-agent | 0:8.8.1-3.el9sat |
| Red Hat satellite capsule 6.16 | python-django | 0:4.2.24-0.1.el9pc |
| Red Hat satellite capsule 6.16 | python-django | 0:4.2.24-0.1.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-django | 0:4.2.24-0.1.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-django | 0:4.2.24-0.1.el8pc |
| Red Hat satellite capsule 6.17 | cjson | 0:1.7.18-2.el9sat |
| Red Hat satellite capsule 6.17 | cjson-debuginfo | 0:1.7.18-2.el9sat |
| Red Hat satellite capsule 6.17 | cjson-debugsource | 0:1.7.18-2.el9sat |
| Red Hat satellite capsule 6.17 | puppet-agent | 0:8.8.1-3.el9sat |
| Red Hat satellite capsule 6.17 | python-django | 0:4.2.24-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-django | 0:4.2.24-0.1.el9pc |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | python-Django | 4.2.11-150600.3.30.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | python-Django | 4.2.11-150600.3.30.1 |
| Ubuntu 22.04 LTS | python-django | 2:3.2.12-2ubuntu1.21 |
| Ubuntu 24.04 LTS | python-django | 3:4.2.11-1ubuntu1.10 |
| Ubuntu Pro 20.04 LTS | python-django | 2:2.2.12-1ubuntu0.29+esm3 |
| openSUSE Leap 15.6 | python-Django | 4.2.11-150600.3.30.1 |
| openSUSE Tumbleweed | python-Django | 5.2.6-1.1 |
| openSUSE Tumbleweed | python-Django4 | 4.2.24-1.1 |
| openSUSE Tumbleweed | python-Django5 | 5.2.16-1.1 |
| openSUSE Tumbleweed | python-Django6 | 6.0-1.1 |