Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-HG4C-RGVM-964G
HistoryAug 15, 2018 - 8:02 p.m.

SQL Injection in pycsw

2018-08-1520:02:53
Google
osv.dev
8

0.002 Low

EPSS

Percentile

56.8%

JSON

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL (at least) it is possible to perform updates/inserts/deletes and database modifications to any table the database user has access to.

CPENameOperatorVersion
pycsweq1.4.0
pycsweq1.8.1
pycsweq1.10.2
pycsweq1.6.1
pycsweq1.8.3
pycsweq1.4.1
pycsweq1.8.5
pycsweq2.0.0
pycsweq1.8.0
pycsweq1.8.4
Rows per page:
1-10 of 211

Related

ubuntucve 1
debiancve 1
osv 2
cvelist 1
prion 1
nvd 1
cve 1
github 1
ubuntucve
ubuntucve
CVE-2016-8640
2018-08-01 00:00:00
debiancve
debiancve
CVE-2016-8640
2018-08-01 18:29:00
osv
osv
CVE-2016-8640
2018-08-01 18:29:00
PYSEC-2018-98
2018-08-01 18:29:00
cvelist
cvelist
CVE-2016-8640
2016-11-11 00:00:00
prion
prion
Sql injection
2018-08-01 18:29:00
nvd
nvd
CVE-2016-8640
2018-08-01 18:29:00
cve
cve
CVE-2016-8640
2018-08-01 18:29:00
github
github
SQL Injection in pycsw
2018-08-15 20:02:53

0.002 Low

EPSS

Percentile

56.8%

JSON
Related for OSV:GHSA-HG4C-RGVM-964G
ubuntucve1debiancve1osv2cvelist1prion1nvd1cve1github1