Tortoise Orm Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tortoise Orm Project records in CISA KEV

No Tortoise Orm Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tortoise Orm 1 record MEDIUM

Records

1 record in Tortoise Orm · all components

TI-2020-08884 CVE-2020-11010 · GHSA-9j2c-x8qm-qmjq

SQL injection in Tortoise ORM

MEDIUM 40

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01056 Published 2020-04-20 Fixed in 0.15.23, 0.16.6 CWE-89

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0