Lucene search

CVE-2023-30608

🗓️ 18 Apr 2023 22:08:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 63 Views🌐 2 Media mentions

sqlparse Python SQL parser module vulnerable to ReDoS in versions prior to 0.4.

Reporter	Title	Published	Views	Family All 40
Tenable Nessus	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : SQL parse vulnerability (USN-6064-1)	13 May 202300:00	–	nessus
Tenable Nessus	SUSE SLES15 : Recommended update for google-cloud SDK (SUSE-SU-SUSE-RU-2024:1637-3)	14 Sep 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 : Recommended update for google-cloud SDK (SUSE-SU-SUSE-RU-2024:1637-1)	15 May 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-sqlparse (SUSE-SU-2023:2619-1)	26 Jun 202300:00	–	nessus
Tenable Nessus	Debian DLA-3425-1 : sqlparse - LTS security update	17 May 202300:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 : Recommended update for google-cloud SDK (SUSE-SU-SUSE-RU-2024:1637-2)	21 Jun 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : python-sqlparse (SUSE-SU-2023:2462-1)	9 Jun 202300:00	–	nessus
Tenable Nessus	RHEL 8 : RHUI 4.5.0 - Security, Bug Fixes, and Enhancements (Moderate) (RHSA-2023:4591)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Satellite 6.14 (RHSA-2023:6818)	29 Apr 202400:00	–	nessus
Tenable Nessus	Rocky Linux 8 : Satellite 6.14 (RLSA-2023:6818)	11 Nov 202300:00	–	nessus

Nvd

Vulners

Node

sqlparse_project sqlparseRange0.1.15–0.4.4python

Node

debian debian_linuxMatch10.0

[
  {
    "vendor": "andialbrecht",
    "product": "sqlparse",
    "versions": [
      {
        "version": ">= 0.1.15, < 0.4.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/andialbrecht/sqlparse/commit/e75e35869473832a1eb67772b1adfee2db11b85a
github	www.github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
owasp	www.owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS
lists	www.lists.debian.org/debian-lts-announce/2023/05/msg00017.html
github	www.github.com/andialbrecht/sqlparse/commit/c457abd5f097dd13fb21543381e7cfafe7d31cfb

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Apr 2023 22:15Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.001

CWE-1333