GitHub Advisoryadvisory · PyPI

GHSA-vmqv-47j8-gwv8 Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server

HIGH Published 2024-03-12 Modified 2024-04-11 Official page ↗

Aliases: CVE-2024-26164
Ecosystem: PyPI
Packages: mssql-django
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-20
Reviewed: 2024-03-13

Affected packages

• PyPI mssql-django: < 1.4.1 → fixed in 1.4.1

Description

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

Related

Alias · CVE (1)

CVE-2024-26164 Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability vulnerability

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References