← Back

Pycsw

pycsw

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Pycsw
pycsw
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-8640
1Pycsw
1Pycsw
Nov 21, 2024
Aug 1, 2018
N/A· v4
9.1 CRITICAL· v3
7.5 HIGH· v2
A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL...Show more
A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL (at least) it is possible to perform updates/inserts/deletes and database modifications to any table the database user has access to.Show less