CVE-2012-0805
2 advisories.
PyPI/sqlalchemy CVE-2012-0805: critical 9.8
SQLAlchemy vulnerable to SQL injection
Action: Upgrade sqlalchemy to 0.7.0b4 or later.
pip install sqlalchemy==0.7.0b4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0b4 | - |
Fixed versions
| 0.7.0b4 |
Sources
- osv: GHSA-hfg2-wf6j-x53p
- https://nvd.nist.gov/vuln/detail/CVE-2012-0805
- https://github.com/sqlalchemy/sqlalchemy/commit/51fea2e159ca93daa0bc8066a5c35d8436d99418
- https://bugs.launchpad.net/keystone/+bug/918608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73756
- https://github.com/pypa/advisory-database/tree/main/vulns/sqlalchemy/PYSEC-2012-9.yaml
- https://github.com/sqlalchemy/sqlalchemy
- https://web.archive.org/web/20140721183117/http://secunia.com/advisories/48771
- https://web.archive.org/web/20140802043526/http://secunia.com/advisories/48328
- https://web.archive.org/web/20140802044957/http://secunia.com/advisories/48327
- http://rhn.redhat.com/errata/RHSA-2012-0369.html
- http://www.debian.org/security/2012/dsa-2449
- http://www.sqlalchemy.org/changelog/CHANGES_0_7_0
- http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7
CVE-2012-0805 · published · modified · JSON
PyPI/sqlalchemy CVE-2012-0805: unknown
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select
Action: Upgrade sqlalchemy to 0.7.0 or later.
pip install sqlalchemy==0.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: PYSEC-2012-9
- https://bugs.launchpad.net/keystone/+bug/918608
- http://rhn.redhat.com/errata/RHSA-2012-0369.html
- http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/
- http://secunia.com/advisories/48771
- http://www.sqlalchemy.org/changelog/CHANGES_0_7_0
- http://secunia.com/advisories/48328
- http://secunia.com/advisories/48327
- http://www.debian.org/security/2012/dsa-2449
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73756
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:059
- https://github.com/advisories/GHSA-hfg2-wf6j-x53p
CVE-2012-0805 · published · modified · JSON