1. Home
  2. CVE Database
  3. CVE-2020-17495
HIGH · 7.5

CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information tha...

Vulnerability Description

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Django-Celery-Results ProjectDjango-Celery-Results<= 1.2.1

Related Weaknesses (CWE)

CWE-312

References

FAQ

What is CVE-2020-17495?

CVE-2020-17495 is a vulnerability with a CVSS score of 7.5 (HIGH). django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information tha...

How severe is CVE-2020-17495?

CVE-2020-17495 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-17495?

Check the references section above for vendor advisories and patch information. Affected products include: Django-Celery-Results Project Django-Celery-Results.