Browse / Django

Django

See its reports on the map

What gets reported to Django

• SQL Injection4
• Code Execution2
• Cross-Site Request Forgery1
• Authentication1
• Path Traversal1
• Denial of Service1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. SQL Injection when using FilteredRelationSQL Injection · critical
   96 votes
2. SQL Injection in Django ORM via Unvalidated `_connector` in Q ObjectsSQL Injection · critical
   77 votes
3. CSRF protection bypass on any Django powered site via Google AnalyticsCross-Site Request Forgery (CSRF)
   70 votes
4. SQL injection in JSONField KeyTransformSQL Injection · high
   68 votes
5. User enumeration via timing attack in Django mod_wsgi authentication backend leads to account discoveryImproper Authentication - Generic
   62 votes
6. Potential SQL Injection when annotating FilteredRelation on PostgreSQLSQL Injection · high
   52 votes
7. Path traversal via archive.extract - CVE 2021-3281 incomplete patchPath Traversal · low
   38 votes
8. ASGIRequest header concatenation quadratic CPU DoS on Django via repeated headers leads to worker exhaustionUncontrolled Resource Consumption
   24 votes
9. Jenkins Unauthenticated RCE on https://djangoci.com/InformativeOS Command Injection · critical
   22 votes
10. Deserialization of potentially malicious data to RCEInformativeDeserialization of Untrusted Data · high
    8 votes
11. Email Spoofing Possible on djangoproject.com Email DomainN/ABusiness Logic Errors · medium
    8 votes
12. `Vary` cache-key conflation of absent and empty request fieldslow
    7 votes