Read the docs
Red Hat Security Advisory

RHSA-2012:0369

python-sqlalchemy security update

Released 2012-03-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 38

Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspec…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0283 Published 2012-06-05 Fixed in 0.7.0b4 CWE-89