CVE-2019-7164

Publication date

2019-02-20 00:00:00

Family

mitre

State

PUBLISHED

Description

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.