CVE-2019-14234
Publication date 1 August 2019
Last updated 18 August 2025
Ubuntu priority
Description
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to an error in shallow key transformation, key and index lookups for django.contrib.postgres.fields.JSONField, and key lookups for django.contrib.postgres.fields.HStoreField, were subject to SQL injection. This could, for example, be exploited via crafted use of "OR 1=1" in a key or index name to return all records, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to the QuerySet.filter() function.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| python-django | 26.10 stonking |
Fixed in 1:1.11.22-1ubuntu1
|
| 26.04 LTS resolute |
Fixed in 1:1.11.22-1ubuntu1
|
|
| 24.04 LTS noble |
Fixed in 1:1.11.22-1ubuntu1
|
|
| 22.04 LTS jammy |
Fixed in 1:1.11.22-1ubuntu1
|
|
| 20.04 LTS focal |
Fixed in 1:1.11.22-1ubuntu1
|
|
| 18.04 LTS bionic |
Fixed in 1:1.11.11-1ubuntu1.5
|
|
| 16.04 LTS xenial |
Fixed in 1.8.7-1ubuntu5.10
|
|
| 14.04 LTS trusty |
Vulnerable
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
9.8 · Critical
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Related Ubuntu Security Notices (USN)
- USN-4084-1
- Django vulnerabilities
- 1 August 2019