Exploitation Summary
EIP tracks 2 public exploits for CVE-2019-14234. PoCs published by malvika-thakur, giuliodamico.
AI-analyzed exploit summary This repository provides a functional proof-of-concept for CVE-2019-14234, a SQL injection vulnerability in Django's JSONField/HStoreField. It includes a Dockerized Django 2.2.3 environment with a vulnerable model and admin interface to demonstrate the exploit via crafted GET parameters.
Description
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to an error in shallow key transformation, key and index lookups for django.contrib.postgres.fields.JSONField, and key lookups for django.contrib.postgres.fields.HStoreField, were subject to SQL injection. This could, for example, be exploited via crafted use of "OR 1=1" in a key or index name to return all records, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to the QuerySet.filter() function.
Exploits (2)
This repository provides a functional proof-of-concept for CVE-2019-14234, a SQL injection vulnerability in Django's JSONField/HStoreField. It includes a Dockerized Django 2.2.3 environment with a vulnerable model and admin interface to demonstrate the exploit via crafted GET parameters.
This repository contains a functional Django application demonstrating CVE-2019-14234, a SQL injection vulnerability in Django's JSONField. The vulnerable code includes a Django model with a JSONField, and the setup allows for testing SQL injection via crafted queries.
References (9)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H