@ch4n3.yoon
  • Home
  • About
  • Posts

1-day

CVE-2023-23969: Potential denial-of-service via Accept-Language headers

CVE-2023-23969: Potential denial-of-service via Accept-Language headers

Django의 Accept-Language 헤더 처리에서 발견된 DoS 취약점 CVE-2023-23969를 분석합니다. re.split()과 lru_cache의 조합이 원인입니다.
Seokchan Yoon Feb 6, 2023
CVE-2022-28347: Potential SQLi via QuerySet.explain() on PostgreSQL

CVE-2022-28347: Potential SQLi via QuerySet.explain() on PostgreSQL

PostgreSQL 환경에서 Django QuerySet의 explain() 메소드를 통해 발생하는 SQL Injection 취약점 CVE-2022-28347을 분석합니다.
Seokchan Yoon Jan 25, 2023
CVE-2022-34265: Potential SQLi via Trunc() and Extract()

CVE-2022-34265: Potential SQLi via Trunc() and Extract()

Django의 Trunc()과 Extract() 함수에서 발견된 SQL Injection 취약점 CVE-2022-34265를 분석합니다.
Seokchan Yoon Jan 21, 2023
  • Home
  • About
  • Facebook
  • LinkedIn
All articles are written by Seokchan Yoon (Channy) with ❤️‍🔥