CVE-2024-53908

Summary

CVE-2024-53908 is a vulnerability affecting older versions of Django, specifically Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. This issue arises when the django.db.models.fields.json.HasKey lookup is directly used with Oracle databases and untrusted data is passed as a left-hand side value. As a result, this vulnerability is susceptible to SQL injection attacks. Applications that utilize the jsonfield.has_key lookup via the double underscore notation are not affected by this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.