ROS-20220516-04

Vulnerability of QuerySet.explain() function of Django web application software platform is related to
failure to take measures to protect the SQL query structure. Exploitation of the vulnerability could allow an attacker,
acting remotely, to affect the confidentiality, integrity and availability of protected information with the help of a specially generated dictionary.
information with the help of a specially generated dictionary

A vulnerability in the QuerySet.annotate(), aggregate(), and extra() methods of the web application software platform
Django is related to the failure to take measures to protect the SQL query structure. Exploitation of the vulnerability could
allow a remote intruder to affect the confidentiality, integrity and availability of protected information through the use of the SQL query structure.
availability of protected information using a specially generated dictionary