mirror of
https://github.com/0xMarcio/cve.git
synced 2025-12-16 20:27:21 +00:00
671 B
671 B
CVE-2019-7164
Description
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
POC
Reference
- https://github.com/sqlalchemy/sqlalchemy/issues/4481
- https://www.oracle.com/security-alerts/cpujan2021.html