SQLAlchemy vulnerable to SQL injection
High severity
GitHub Reviewed
Published
May 14, 2022
to the GitHub Advisory Database
•
Updated Apr 30, 2024
Description
Published by the National Vulnerability Database
Jun 5, 2012
Published to the GitHub Advisory Database
May 14, 2022
Reviewed
Apr 30, 2024
Last updated
Apr 30, 2024
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.
References