CVE-2019-7164

Published February 20th, 2019

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.

sqlalchemy/sqlalchemy

The Database Toolkit for Python

GitHub

11.9K