Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-36039

Published: 21/05/2024 Updated: 21/05/2024

Vulnerability Summary

PyMySQL up to and including 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

Vendor Advisories

Debian CVElist Bug Report Logs: python-pymysql: CVE-2024-36039
Debian Bug report logs - #1071628 python-pymysql: CVE-2024-36039 Package: src:python-pymysql; Maintainer for src:python-pymysql is Debian OpenStack <team+openstack@trackerdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Wed, 22 May 2024 15:12:02 UTC Severity: grave Tags: security, upstream Found ...

References

https://github.com/PyMySQL/PyMySQL/releases/tag/v1.1.1https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1071628
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20065open redirectCVE-2024-1086path traversalCVE-2024-29825XXECVE-2024-29822CVE-2024-20696CVE-2024-3564
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook