VYPR

PostgreSQL Query Deluxe

by Yvan Dotet

CVEs (1)

  • CVE-2024-34532CriMay 6, 2024
    risk 0.64cvss 9.8epss 0.00

    A SQL injection vulnerability in Yvan Dotet PostgreSQL Query Deluxe module (aka query_deluxe) 17.x before 17.0.0.4 allows a remote attacker to gain privileges via the query parameter to models/querydeluxe.py:QueryDeluxe::get_result_from_query.