CVE-2021-30459 | BDVDB-2026-152159 Detail

Description#

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input field of the SQL explain, analyze, or select form.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/jazzband/django-debug-toolbar/releases
https://github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gj
https://www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases/

Exploit#

No public exploit known

History#

Version 12021-04-14Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.