Debian Security Advisory DSA 2449-1 (sqlalchemy)

The remote host is missing an update to sqlalchemy announced via advisory DSA 2449-1. OpenVAS Vulnerability Test $Id: deb24491.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2449-1 sqlalchemy Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2449-1 : sqlalchemy - missing input sanitization

It was discovered that SQLAlchemy, a SQL toolkit and object relational mapper for Python, is not sanitizing input passed to the limit/offset keywords to select as well as the value passed to select.limit/offset. This allows an attacker to perform SQL injection attacks against applications using...