CVE-2024-36039

Опубликовано: 21 мая 2024

Источник: nvd

CVSS3: 6.3

EPSS Низкий

Описание

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

EPSS

Процентиль: 49%

0.00691

Низкий

6.3 Medium

CVSS3

CWE-89

CVE-2024-36039

CVSS3: 6.3

ubuntu

около 2 лет назад

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

CVE-2024-36039

CVSS3: 6.3

redhat

около 2 лет назад

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

CVE-2024-36039

CVSS3: 6.3

msrc

больше 1 года назад

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

CVE-2024-36039

CVSS3: 6.3

debian

около 2 лет назад

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON ...

SUSE-SU-2024:1925-1

suse-cvrf

около 2 лет назад

Security update for python-PyMySQL

EPSS

Процентиль: 49%

0.00691

Низкий

6.3 Medium

CVSS3

CWE-89