{"action":"Upgrade pywebdav to 0.9.4.1 or later.","affected":[{"fixed":"0.9.4.1","introduced":"0"}],"component":"pywebdav","cve_ids":["CVE-2011-0432"],"ecosystem":"PyPI","epss":0.01811,"exploited":false,"fixed_versions":["0.9.4.1"],"ghsa_id":"GHSA-69vw-jfq7-935g","id":"tcs_01M5KF31H1DBMY96CPYNEMFYV8","modified_at":"2024-10-24T22:39:08.184315Z","published_at":"2022-05-17T05:42:57Z","references":["https://osv.dev/vulnerability/GHSA-69vw-jfq7-935g","https://nvd.nist.gov/vuln/detail/CVE-2011-0432","https://bugzilla.redhat.com/show_bug.cgi?id=677718","https://github.com/ashtons/pywebdav-iphone","https://github.com/pypa/advisory-database/tree/main/vulns/pywebdav/PYSEC-2011-7.yaml","https://web.archive.org/web/20110305233800/http://secunia.com/advisories/43571","https://web.archive.org/web/20110321033933/http://secunia.com/advisories/43602","https://web.archive.org/web/20110321055414/http://secunia.com/advisories/43703","https://web.archive.org/web/20200228163209/http://www.securityfocus.com/bid/46655","http://code.google.com/p/pywebdav/updates/list","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055412.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055413.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055444.html","http://pywebdav.googlecode.com/files/PyWebDAV-0.9.4.1.tar.gz"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-69vw-jfq7-935g","url":"https://osv.dev/vulnerability/GHSA-69vw-jfq7-935g"}],"summary":"PyWebDAV SQL Injection vulnerability"}