{"id":8894,"date":"2025-12-03T10:03:34","date_gmt":"2025-12-03T10:03:34","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2025\/12\/03\/multiple-django-vulnerabilities-enables-sql-injection-and-denial-of-service-attacks\/"},"modified":"2025-12-03T10:03:34","modified_gmt":"2025-12-03T10:03:34","slug":"multiple-django-vulnerabilities-enables-sql-injection-and-denial-of-service-attacks","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2025\/12\/03\/multiple-django-vulnerabilities-enables-sql-injection-and-denial-of-service-attacks\/","title":{"rendered":"Multiple Django Vulnerabilities Enables SQL Injection and Denial-of-Service Attacks"},"content":{"rendered":"

Multiple Django Vulnerabilities Enables SQL Injection and Denial-of-Service Attacks
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

The development team has officially released essential security updates to address two significant vulnerabilities found in the popular web framework.<\/p>\n

These issues range from high to moderate severity. They could allow attackers to compromise database<\/a> integrity or crash servers through resource exhaustion.<\/p>\n

The most critical flaw, tracked as\u00a0CVE-2025-13372, is a high-severity SQL injection<\/a> vulnerability affecting projects that use PostgreSQL. The issue lies within the\u00a0FilteredRelation\u00a0class, specifically how it handles column aliases.<\/p>\n

Attackers can exploit this by crafting a specific dictionary (using dictionary expansion) passed to\u00a0QuerySet.annotate()\u00a0or\u00a0QuerySet.alias(). If successful, this manipulation allows malicious SQL code to be injected into the database query. <\/p>\n

The second vulnerability,\u00a0CVE-2025-64460, is a moderate-severity issue involving the XML<\/a> serializer.<\/p>\n

Django discovered that the method\u00a0django.core.serializers.xml_serializer. getInnerText()\u00a0suffers from algorithmic complexity issues.<\/p>\n

\n\n\n\n\n\n\n
CVE ID<\/th>\nVulnerability Type<\/th>\nSeverity<\/th>\n<\/tr>\n<\/thead>\n
CVE-2025-13372<\/td>\nSQL Injection<\/td>\nHigh<\/td>\n<\/tr>\n
CVE-2025-64460<\/td>\nDenial of Service (DoS)<\/td>\nModerate<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

When an application processes specially crafted XML input, the serializer repeatedly concatenates strings as it collects text nodes.<\/p>\n

Django has released<\/a> security updates 5.2.9, 5.1.15, and 4.2.27, and developers are strongly advised to upgrade right away to avoid possible attacks.<\/p>\n

This recursive process can lead to \u201csuperlinear\u201d computation time, causing the server\u2019s CPU and memory usage to spike.<\/p>\n

A remote attacker could use this to trigger a denial-of-service (DoS<\/a>) attack, effectively crashing the service or making it unresponsive.<\/p>\n

These vulnerabilities affect all supported versions of Django, including the main branch and the upcoming Django 6.0 (currently in release candidate status).<\/p>\n

Developers using the main branch or the Django 6.0 release candidate should pull the latest commits from the official repository to ensure their projects are secure.<\/p>\n

Follow us on Google News<\/a>, LinkedIn<\/a>, and X<\/a> for daily cybersecurity updates. Contact us<\/a> to feature your stories.<\/strong><\/p>\n

The post Multiple Django Vulnerabilities Enables SQL Injection and Denial-of-Service Attacks<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n

\t

\n
<\/BR>
\n Abinaya
\n \t

\n
<\/BR>
\nGo to cyber-security-news<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Multiple Django Vulnerabilities Enables SQL Injection and Denial-of-Service Attacks The development team has officially released essential security updates to address two significant vulnerabilities found in the popular web framework. These issues range from high to moderate severity. They could allow attackers to compromise database integrity or crash servers through resource exhaustion. The most critical flaw, […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2015,129,63,648],"tags":[130],"class_list":["post-8894","post","type-post","status-publish","format-standard","hentry","category-cve-vulnerabilities","category-cyber-security","category-cyber-security-news","category-vulnerability-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/8894"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=8894"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/8894\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=8894"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=8894"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=8894"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}