SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-pytestUpgrade python2-attrsUpgrade python2-PyMySQLUpgrade python2-CythonUpgrade python2-docutilsUpgrade python2-psycopg2-debugUpgrade python2-pytzUpgrade python2-chardetUpgrade python2-markupsafeUpgrade python2-pyUpgrade python3-docsUpgrade python3-docutilsUpgrade python2-psycopg2-testsUpgrade python2-ipaddressUpgrade python2-pysocksUpgrade python2-rpm-macrosUpgrade python2-coverageUpgrade python2-mockUpgrade python2-funcsigsUpgrade python2-setuptools_scmUpgrade python2-pytest-mockUpgrade python2-psycopg2Upgrade python2-idnaUpgrade python-psycopg2-docUpgrade python2-pyyamlUpgrade python2-pluggy | May 13, 2022 | Feb 6, 2019 |
| Centos_linux | — | Upgrade python3-pymongo-gridfsUpgrade python2-psycopg2Upgrade python2-markupsafeUpgrade python3-wheelUpgrade python3-docsUpgrade python2-psycopg2-testsUpgrade python2-bsonUpgrade python2-mockUpgrade python2-pipUpgrade babelUpgrade python3-docutilsUpgrade python36-debugUpgrade python2-testUpgrade python2-sixUpgrade python2-dnsUpgrade python2-numpy-f2pyUpgrade python3-pymongo-debuginfoUpgrade python2-attrsUpgrade python2-Cython-debuginfoUpgrade python2-debugsourceUpgrade python2-requestsUpgrade python2-psycopg2-debuginfoUpgrade python2-coverageUpgrade python2-ipaddressUpgrade python36-develUpgrade python2-pysocksUpgrade python2-funcsigsUpgrade python2-virtualenvUpgrade python2-pymongo-gridfsUpgrade python2-docsUpgrade python-virtualenv-docUpgrade python2Upgrade python2-pytestUpgrade python2-wheelUpgrade python-psycopg2-docUpgrade python2-lxml-debuginfoUpgrade python3-noseUpgrade python3-scipyUpgrade python2-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-rpm-macrosUpgrade python2-backports-ssl_match_hostnameUpgrade python2-debugUpgrade python2-pygmentsUpgrade python2-chardetUpgrade python2-develUpgrade python2-setuptoolsUpgrade python3-virtualenvUpgrade python2-idnaUpgrade python2-pluggyUpgrade python3-bson-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-lxmlUpgrade python2-PyMySQLUpgrade python-nose-docsUpgrade python2-tkinterUpgrade python2-pyyamlUpgrade python2-setuptools_scmUpgrade python2-pymongo-debuginfoUpgrade python2-babelUpgrade python2-pyUpgrade python2-noseUpgrade python3-bsonUpgrade python2-jinja2Upgrade python2-numpy-debuginfoUpgrade python3-pygmentsUpgrade python3-pymongoUpgrade python2-sqlalchemyUpgrade python2-libsUpgrade python3-scipy-debuginfoUpgrade python-pymongo-docUpgrade python2-numpyUpgrade python2-urllib3Upgrade python2-pytest-mockUpgrade python2-bson-debuginfoUpgrade python2-scipy-debuginfoUpgrade python-sqlalchemy-docUpgrade python2-docutilsUpgrade python2-CythonUpgrade python36Upgrade python2-toolsUpgrade python2-pytzUpgrade python2-numpy-docUpgrade python3-PyMySQLUpgrade python2-pymongoUpgrade python2-coverage-debuginfoUpgrade python3-sqlalchemyUpgrade python2-docs-infoUpgrade python2-scipyUpgrade python2-backportsUpgrade python2-pyyaml-debuginfoUpgrade python36-rpm-macros | Aug 28, 2019 | Feb 6, 2019 |
| Debian | — | Upgrade sqlalchemy | Mar 19, 2019 | Feb 6, 2019 |
| Freebsd | — | Upgrade py39-sqlalchemy10Upgrade py39-sqlalchemy11Upgrade py39-sqlalchemy12 | Apr 14, 2023 | Apr 9, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-sqlalchemy | Nov 3, 2020 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-sqlalchemy | Sep 28, 2020 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-sqlalchemy | Nov 2, 2020 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-sqlalchemyUpgrade python2-sqlalchemyUpgrade python-sqlalchemy | Dec 15, 2020 | Feb 6, 2019 |
| Oracle Solaris | — | Upgrade library/python/sqlalchemy-27 to version 1.2.19-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/python/sqlalchemy-34 to version 1.2.19-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/python/sqlalchemy-35 to version 1.2.19-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/python/sqlalchemy to version 1.2.19-11.4.16.0.1.3.0 on Solaris 11.4 | Dec 18, 2019 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade python2-sqlalchemyUpgrade python3-bsonUpgrade python2-noseUpgrade python2-psycopg2Upgrade python3-scipyUpgrade python2-pluggyUpgrade python2-rpm-macrosUpgrade python2-virtualenvUpgrade python2-babelUpgrade python2-pyyamlUpgrade python2-markupsafeUpgrade python3-pygmentsUpgrade python2-chardetUpgrade python2-docsUpgrade python2-tkinterUpgrade python3-wheelUpgrade python2-pymongoUpgrade python3-sqlalchemyUpgrade python2-idnaUpgrade python2-mockUpgrade python2-numpy-docUpgrade python2-pygmentsUpgrade python-pymongo-docUpgrade python-sqlalchemy-docUpgrade python2-urllib3Upgrade python2-lxmlUpgrade python2-backports-ssl_match_hostnameUpgrade python2-debugUpgrade python-psycopg2-docUpgrade python3-pymongo-gridfsUpgrade python2-requestsUpgrade python3-docutilsUpgrade python2-funcsigsUpgrade python3-docsUpgrade python2-coverageUpgrade python2-psycopg2-testsUpgrade python2-setuptoolsUpgrade python2-setuptools_scmUpgrade python36-develUpgrade python2-bsonUpgrade python2-pipUpgrade python2-pymongo-gridfsUpgrade python2-backportsUpgrade python2-pytzUpgrade python36-debugUpgrade python2-libsUpgrade python2-docutilsUpgrade python3-pymongoUpgrade python2-dnsUpgrade python2-ipaddressUpgrade python2-pysocksUpgrade python36-rpm-macrosUpgrade python3-noseUpgrade python2-jinja2Upgrade python-virtualenv-docUpgrade babelUpgrade python3-PyMySQLUpgrade python2-pytest-mockUpgrade python-nose-docsUpgrade python2-toolsUpgrade python2-scipyUpgrade python2-pyUpgrade python2-develUpgrade python2Upgrade python2-psycopg2-debugUpgrade python2-PyMySQLUpgrade python2-wheelUpgrade python3-virtualenvUpgrade python2-sixUpgrade python2-pytestUpgrade python2-numpy-f2pyUpgrade python2-numpyUpgrade python36Upgrade python2-docs-infoUpgrade python2-attrsUpgrade python2-testUpgrade python2-Cython | Jul 22, 2024 | Feb 1, 2019 |
| Redhat_linux | — | Upgrade python2-docsUpgrade python2-debugUpgrade python2-libsUpgrade python-nose-docsUpgrade python2-numpyUpgrade python2-PyMySQLUpgrade python2-pyyamlUpgrade python2-numpy-debuginfoUpgrade python3-bsonUpgrade python2-CythonUpgrade python36-rpm-macrosUpgrade python2-noseUpgrade python2-pymongo-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-scipyUpgrade python2-coverageUpgrade python3-docutilsUpgrade python2-psycopg2Upgrade python2-toolsUpgrade python36Upgrade python2-sixUpgrade python2-chardetUpgrade python36-debugUpgrade python-virtualenv-docUpgrade python2-bson-debuginfoUpgrade python2-pipUpgrade python2-docutilsUpgrade babelUpgrade python2-debugsourceUpgrade python2-pytest-mockUpgrade python3-noseUpgrade python2-lxml-debuginfoUpgrade python2-docs-infoUpgrade python3-PyMySQLUpgrade python2-Cython-debuginfoUpgrade python2-idnaUpgrade python3-scipyUpgrade python2-numpy-f2pyUpgrade python2-pyUpgrade python2-babelUpgrade python2-develUpgrade python2-ipaddressUpgrade python3-pymongo-gridfsUpgrade python2-wheelUpgrade python2-dnsUpgrade python2-mockUpgrade python2-jinja2No solution existsUpgrade python3-pymongo-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-pymongoUpgrade python-sqlalchemy-docUpgrade python2-funcsigsUpgrade python2-pluggyUpgrade python2-attrsUpgrade python2-urllib3Upgrade python2-scipy-debuginfoUpgrade python2-backports-ssl_match_hostnameUpgrade python2-testUpgrade python-psycopg2-docUpgrade python2-sqlalchemyUpgrade python2-setuptoolsUpgrade python2-pytestUpgrade python2-backportsUpgrade python3-virtualenvUpgrade python3-pymongoUpgrade python2-requestsUpgrade python2-rpm-macrosUpgrade python2-pysocksUpgrade python2-virtualenvUpgrade python3-scipy-debuginfoUpgrade python2-tkinterUpgrade python2-psycopg2-testsUpgrade python2-bsonUpgrade python2-numpy-docUpgrade python-pymongo-docUpgrade python3-wheelUpgrade python2-debuginfoUpgrade python3-bson-debuginfoUpgrade python2-pymongo-gridfsUpgrade python3-sqlalchemyUpgrade python2-pytzUpgrade python3-docsUpgrade python3-pygmentsUpgrade python2-psycopg2-debuginfoUpgrade python2-pygmentsUpgrade python2-pyyaml-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-lxmlUpgrade python2Upgrade python2-markupsafeUpgrade python36-develUpgrade python2-setuptools_scm | May 8, 2019 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade python36Upgrade python2-psycopg2-debug-debuginfoUpgrade python2-CythonUpgrade python2-pyyaml-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-markupsafeUpgrade python36-debugUpgrade python2-psycopg2-debuginfoUpgrade python-psycopg2-docUpgrade python2-pyyamlUpgrade python36-develUpgrade python2-psycopg2-debugUpgrade python2-Cython-debuginfoUpgrade python2-psycopg2Upgrade python2-coverageUpgrade python2-psycopg2-tests | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade python-SQLAlchemy-docUpgrade python3-SQLAlchemyUpgrade python2-SQLAlchemy | Sep 3, 2019 | Feb 6, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub