From 6d99943fc2121f6c8ae2ca7c264d5ab5266f6831 Mon Sep 17 00:00:00 2001 From: za Date: Mon, 25 Sep 2023 15:49:39 +0700 Subject: [PATCH 1/3] Add Django commit to fix CVE-2022-34265 --- django/CVE-2022-34265/README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/django/CVE-2022-34265/README.md b/django/CVE-2022-34265/README.md index 361c655a..ff92c6f4 100644 --- a/django/CVE-2022-34265/README.md +++ b/django/CVE-2022-34265/README.md @@ -8,6 +8,8 @@ Reference link: - https://www.djangoproject.com/weblog/2022/jul/04/security-releases/ +Refer to [this commit](https://github.com/django/django/commit/0dc9c016fadb71a067e5a42be30164e3f96c0492) on how to fix CVE-2022-34265. + ## Start Vulnerability Application Start a vulnerable Django 4.0.5 by executing the following command: From aa742be4fcac3de75ebfbc9f0831e52b56489fc2 Mon Sep 17 00:00:00 2001 From: za Date: Thu, 2 Nov 2023 13:48:36 +0700 Subject: [PATCH 2/3] Put the fix commit as reference link --- django/CVE-2022-34265/README.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/django/CVE-2022-34265/README.md b/django/CVE-2022-34265/README.md index ff92c6f4..cfa4dd53 100644 --- a/django/CVE-2022-34265/README.md +++ b/django/CVE-2022-34265/README.md @@ -7,8 +7,7 @@ Django released a security update on July 4, 2022, which fixes a SQL injection v Reference link: - https://www.djangoproject.com/weblog/2022/jul/04/security-releases/ - -Refer to [this commit](https://github.com/django/django/commit/0dc9c016fadb71a067e5a42be30164e3f96c0492) on how to fix CVE-2022-34265. +- https://github.com/django/django/commit/0dc9c016fadb71a067e5a42be30164e3f96c0492 ## Start Vulnerability Application From 0d602c159b129be47e8fb93e1ef7aba536565f96 Mon Sep 17 00:00:00 2001 From: za Date: Fri, 3 Nov 2023 10:22:06 +0700 Subject: [PATCH 3/3] Added the django fix link also on CN README --- django/CVE-2022-34265/README.zh-cn.md | 1 + 1 file changed, 1 insertion(+) diff --git a/django/CVE-2022-34265/README.zh-cn.md b/django/CVE-2022-34265/README.zh-cn.md index 29a67f3e..c4c39a80 100644 --- a/django/CVE-2022-34265/README.zh-cn.md +++ b/django/CVE-2022-34265/README.zh-cn.md @@ -7,6 +7,7 @@ Django在2022年7月4日发布了安全更新，修复了在数据库函数`Trun 参考链接： - https://www.djangoproject.com/weblog/2022/jul/04/security-releases/ +- https://github.com/django/django/commit/0dc9c016fadb71a067e5a42be30164e3f96c0492 ## 漏洞环境