CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 44.4% probability of exploitation in the next 30 days. It involves a SQL injection risk.
CVE
CVE-2021-35042
Severity
CRITICAL
CVSS
9.8
EPSS
44.37%
Original NVD Description
Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.
Related CVEs
Other vulnerabilities affecting the same vendor(s)