Description
An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().
Remediation
References
Related Vulnerabilities
WordPress Plugin Properties and Agents-Real Estate Manager Cross-Site Scripting (6.7.1)
silverstripeCMS Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-12245)
Drupal Core Multiple Vulnerabilities (8.0.0 - 9.1.15)
WebLogic CVE-2021-2136 Vulnerability (CVE-2021-2136)
Django Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-0696)