Django QuerySet.order_by() SQL注入漏洞(CVE-2021-35042)

2021-08-25 Django PoC No

Description

该漏洞需要用户可控order_by传入的值,在预期列的位置注入SQL语句。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities