Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45867
HistoryMar 14, 2024 - 10:22 a.m.

Remote Code Execution (RCE)

2024-03-1410:22:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
mssql-django
vulnerability
remote code execution

8.9 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.5%

mssql-django is vulnerable to Remote Code Execution (RCE). The vulnerability is caused due to improper parameter sanitization, allowing attackers to execute arbitrary SQL statements, which can result in Remote Code Execution (RCE).

CPENameOperatorVersion
mssql-djangole1.4
mssql-djangole1.4

8.9 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.5%