SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

SQLAlchemy - (bulletinoct2019)

ID: oval:org.secpod.oval:def:2105280	Date: (C)2020-01-19 (M)2023-12-20
Class: PATCH	Family: unix

SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.

Platform:

Sun Solaris 11

Product:

library/python/sqlalchemy

library/python/sqlalchemy-35

library/python/sqlalchemy-34

library/python/sqlalchemy-27

Reference:

bulletinoct2019